pjcl

This is version 1.0.0 of the Pomcor JavaScript Cryptographic Library (PJCL), which has been refactored as an ES6 module and is primarily intended at this time as a tool for implementing phishing-resistant cryptographic authentication in web applications, as demonstrated in the companion repositories fcorella/crypto-authn-demo-nosql and fcorella/crypto-authn-demo-sql.

The file pjcl-with-argument-checking.js augments pjcl.js with code that checks the arguments of cryptographic functions, to help with debugging programs that use the library. The file pjcl.js is derived from the file pjcl-with-argument-checking.js by commenting out the argument-checking preambles of the functions.

PJCL uses Deterministic Random Bit Generators (DRBGs) as specified in NIST Special publication 800-90A Revision 1 for generation of random bits, and needs sources of entropy. The companion repositories show how /dev/random can be used to obtain server entropy when PJCL is used on the backend, under Nodejs, and how browser entropy can be combined with entropy downloaded from the server when PJCL is used on the front end. The functions in browser-entropy.js provide browser entropy obtained from the Crypto.getRandomValues() method of the Web Crypto API.

Documentation

Extensive cryptographic documentation can be found in the PDF file pjcl-documentation.pdf, which is now in the repository together with its latex source file pjcl-documentation.tex.

Security

Beta test versions of PJCL, not published on GitHub, were available on the Pomcor site. The beta test versions have been archived and deprecated and are no longer maintained. Any bugs found in this or future versions of PJCL should be reported through the Pomcor contact form at https://pomcor.com/contact-us/ .