Developing zero-knowledge solutions with JavaScript

Who am I

Jose Aguinaga / @ jjperezaguinaga

Web Engineer

Startups / Fintech / Privacy

Disclaimer

Crypto stuff ahead, handle with caution, errata might occur

What are zero-knowledge solutions?

Trust based solutions

I have nothing on ya, trust me.

Zero-knowledge solutions

I have nothing on ya, you know.

😅

Zero-knowledge (proved) solutions

I have nothing on ya, you know, but you know I know.

SHA256( )

Where does the Web fit in all this?

Server-side cryptography

SSL, bcrypt, HMACs

//NOTE: This prompts the user to enter a password.
window.crypto.subtle.generateKey(
    {
        name: "PBKDF2",
    },
    false, //whether the key is extractable
    ["deriveKey", "deriveBits"] //can be any combination
)
.then(function(key){
    //returns a key object
    console.log(key);
})
.catch(function(err){
    console.error(err);
});