Browser-based protocol composition safety demo — MAC-then-Encrypt vs Encrypt-then-MAC, padding oracle attack, CRIME, and the composition failures that drove TLS 1.3. No backends. No simulated math.
cryptography aead encrypt-then-mac aes-gcm hmac webcrypto authenticated-encryption crypto-lab mac-then-encrypt protocol-composition
-
Updated
Sep 17, 2026 - TypeScript