nfnite
BROWSER DEMO

Web keypair & record demo

Delivery plan §7.5 steps 5–8 milestone: this page generates a hybrid (Ed25519 + ML-DSA-65) capability-signing keypair, encrypts it at rest in IndexedDB (§7.4 Option A: PBKDF2-derived AES-256-GCM, non-extractable, decrypt-on-demand, zeroize-after-use), then puts and projects a real record — entirely in-browser, no server, no RPC.

STEP 1

Generate keypair


    
STEP 2

Put a record


    
STEP 3

Sign a capability


    
STEP 4

Project (verify + decrypt)


    
STEP 5

IndexedDB persistence check (§7.6)

Reloads this page (a fresh WASM session — the in-memory session state, including data-encryption keys, is deliberately NOT persisted; see web::keystore's module doc) and confirms the encrypted record row written in step 2 is still present in IndexedDB afterwards.


    

Module status

loading…