THE WEB CRYPTOGRAPHY API

The Web Cryptography API (https://www.w3.org/TR/WebCryptoAPI) describes a suite of cryptography tools that standardize how JavaScript can wield cryptographic behavior in a secure and idiomatic fashion. These tools include the ability to generate, use, and apply cryptographic key pairs; encrypt and decrypt messages; and robustly generate random numbers.

---

NOTE   The organization of the cryptography is somewhat bizarre, featuring an outer Crypto object with an inner SubtleCrypto object. Before the Web Cryptography API was standardized, the window.crypto property was highly fragmented across browsers. To allow for cross-browser compatibility, the bulk of the API is exposed on the SubtleCrypto object.

---

Random Number Generation

When tasked with generating random values, most developers reach for Math.random(). This method is implemented in browsers as a pseudorandom number generator (PRNG). The "pseudo" designation stems from the nature...