saved
ts-cms-ep-sfx
Hraness wrote this summary from a saved copy of the source. Quotations are taken word for word from the source.
gist
ApelegHQ’s ts-cms-ep-sfx is a browser-only file encryption utility that wraps AES-256-GCM payloads in CMS password-recipient (PWRI) messages and emits a standalone HTML file the recipient opens locally to decrypt. No server sees the bytes; OpenSSL can also decrypt the PEM CMS. Large files are limited by DOM and memory, and security depends on password strength.
ideas
- Encrypt to a self-extracting HTML file. Choose a file and password; the tool writes a standalone page that holds the ciphertext.
- Decrypt stays in the browser. The recipient opens that HTML, enters the password, and downloads the original without uploading to a host.
- CMS and AES-256-GCM are the crypto stack. Standards-based messages aim for interoperability with other CMS tools, including OpenSSL PEM decrypt.
- Local processing is the privacy claim. Encryption and decryption run on-device so content never leaves the machine for the service.
- Size and passwords bound the threat model. Huge files stress browser parsing and RAM; weak passwords dominate residual risk.
quotes
“All encryption and decryption operations are performed locally in the browser, ensuring your data never leaves your device.”
“The utility uses the secure AES-256-GCM cipher to encrypt your files, providing strong protection for your data.”
“By using the CMS standard, this tool avoids "reinventing the wheel" and allows interoperability with other file encryption tools.”