BlindFold

A drag-to-encrypt/decrypt text tool

BlindFold is a Chrome extension that encrypts and decrypts any text with one click by simply dragging. Whatever notepad application you use, if you work in Chrome, you can securely protect your data with BlindFold. Features: - Double Salt System: Generates two random salts for each encryption, ensuring that identical passwords and text produce completely different ciphertexts every time, fundamentally blocking pattern analysis attacks. - PBKDF2 Key Derivation: Transforms simple passwords into powerful encryption keys through 100,000 iterations, making brute-force attacks virtually impossible. Even if a hacker attempts 100 million passwords per second, verifying a single password would take years. - AES-256-GCM Encryption: The encryption algorithm used by the NSA to protect top-secret documents. It simultaneously encrypts data and verifies integrity, instantly detecting tampering when even a single bit of the ciphertext is altered, causing decryption to fail immediately. - KEK/DEK Dual Structure: A new random salt is added to the master password to generate a KEK (Key Encryption Key), which encrypts the DEK (Data Encryption Key) for secure storage, and this DEK encrypts the actual data. Since the DEK is encrypted with the KEK and only the encrypted DEK is stored on the server, the server cannot know the master password. - Unique IV Usage: A secure random number generator creates a new IV for each encryption, ensuring that encrypting the same text produces completely different results every time. - Encoding: Encoded into BlindFold's signature braille-based blocks. How to Use: - Install the extension and sign in/sign up with Google - Set your master password - Drag to select text and click encrypt from the context menu - Text is replaced with or copied as encrypted braille-based blocks - Decryption follows the same process - drag and proceed in the same manner Zero-Knowledge Architecture: - Master password exists only in memory and is never stored - All encryption executes exclusively in the user's browser - All encryption/decryption proceeds offline Since the master password is not stored on the server, encrypted text cannot be recovered if lost. No one, including BlindFold, can know or recover your master password.