{"id":9921,"date":"2026-02-22T23:36:34","date_gmt":"2026-02-22T22:36:34","guid":{"rendered":"https:\/\/www.axew3.com\/w3\/?page_id=9921"},"modified":"2026-09-19T23:58:16","modified_gmt":"2026-09-19T21:58:16","slug":"gemini-w3mypgp-js-rsa-oaep-aes-gcm-hybrid-encryption","status":"publish","type":"page","link":"https:\/\/www.axew3.com\/w3\/gemini-w3mypgp-js-rsa-oaep-aes-gcm-hybrid-encryption\/","title":{"rendered":"Gemini w3mypgp | JS RSA-OAEP &amp; AES-GCM Hybrid Encryption"},"content":{"rendered":"\n<div style=\"height:41px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-xx-large-font-size wp-block-paragraph\"><strong>Gemini<\/strong> <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">w3mypgp v7.0<\/mark><\/strong><\/p>\n\n\n\n<p class=\"has-xx-large-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">v7.2<\/mark><\/strong> (mission impossible)<\/p>\n\n\n\n<div style=\"height:9px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Privacy is a right<\/strong>, not a <em>select<\/em> option on a subscription page or a hidden clause in proprietary software.<\/p>\n\n\n\n<div style=\"height:9px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Updated on 10 Mar 2026<\/mark><\/strong> &#8211; <strong>Gemini w3mypgp v7.2 (mission impossible)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><strong>Hybrid<\/strong> RSA-OAEP + AES-GMC<\/p>\n\n\n\n<p class=\"has-base-background-color has-background has-medium-font-size wp-block-paragraph\">w3mypgp Gemini v7* &#8211; <strong>Made again with &#x2764;&#xfe0f; for privacy<\/strong><\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><strong>w3mypgp Gemini v7.* <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">You can skip directly to the <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">How-To<\/mark><\/strong> and <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Examples<\/mark><\/strong>, but it is recommended that you read the security guidelines first, especially the &#8211; <strong>Tips for staying super secret<\/strong> part more below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">GEMINI<\/mark> <strong>RSA-OAEP &amp; AES-GCM Hybrid<\/strong> what&#8217;s new from UNICORN?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With the Gemini release, the <strong>RSA-OAEP &amp; AES-GCM Hybrid engine<\/strong> supports <strong>one-click batch encryption<\/strong>. Securely package and share <strong>multiple large files<\/strong> with a recipient using only their <strong>Public Key<\/strong>.<br>w3mypgp Gemini strip away the cloud to bring privacy back to where it belongs: in your hands, on your device, under your control.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Instead of being a &#8220;window&#8221; that leaks data to the cloud, we\u2019ve turned the browser into<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Hardened Cryptographic Vault<\/strong> that processes everything locally, in the dark, and in silence. By combining low-level <strong>Binary Packing<\/strong>, <strong>Thread Isolation<\/strong>, and <strong>Forensic Memory Management<\/strong>, the &#8220;GEMINI V7*&#8221; achieves in a single standard HTML file<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Engine:<\/strong> Pure JS Web Crypto (No external dependencies).<\/li>\n\n\n\n<li><strong>Privacy:<\/strong> Zero-Knowledge, Zero-Server, Zero-Trace.<\/li>\n\n\n\n<li><strong>Strength:<\/strong> 700k Iterations \/ SHA-512 \/ AES-256-GCM.<\/li>\n\n\n\n<li><strong>Strength:<\/strong> RSA OAEP SHA-256 4096-bit + SHA-512 \/ AES-256-GCM.<\/li>\n\n\n\n<li><strong>Capacity:<\/strong> 500MB+ Multi-file Streaming via Web Workers.<\/li>\n\n\n\n<li><strong>License:<\/strong> GPLv3 (Auditable Freedom).<\/li>\n<\/ul>\n\n\n\n<h1 class=\"wp-block-heading has-xx-large-font-size\"><strong>Security<\/strong> made easy<\/h1>\n\n\n\n<div style=\"height:5px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-x-large-font-size wp-block-paragraph\"><a href=\"https:\/\/www.axew3.com\/w3\/forums\/viewtopic.php?t=2149\"><strong>Download Gemini w3mypgp<\/strong><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Note very important<\/mark><\/strong>: it is possible to <strong>save encrypted files using any name and extension<\/strong>. This doesn&#8217;t matter because the original filename and MIME type will be encrypted along with the file, and during the decryption, the original file name and MIME type will be reassigned.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Also the <strong>encryption timestamp<\/strong> will be displayed upon decryption.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ex: save the encrypted <strong>mydoc.pdf<\/strong> file (or multiple encrypted files) as <strong>myprogram.exe<\/strong> or myfile.secret. The decrypted file will return <em>mydoc.pdf<\/em>  (or all multiple original files names) as filename(s) when the file is decrypted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If it was <strong>typed text<\/strong>, the decrypted file name will be (but you can rename it whatever)<br>&#8220;encryption <em>date + &#8212; + time + <\/em><strong>_message.txt<\/strong>&#8220;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is valid both for the <strong>Hybrid RSA-OAEP\/AES-GCM<\/strong> and <strong>AES-GCM encryptions<\/strong>.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-xx-large-font-size\">Hybrid RSA-OAEP + AES-GMC<\/h2>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\"><strong>RSA-OAEP<\/strong> SHA-256 4096-bit and <strong>AES-GCM<\/strong> to pass protect files<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>If you lose<\/strong> your RSA-OAEP 4096-bit private key or your very complex AES-GCM passphrase, your files are permanently gone. Due to the mathematical complexity of these algorithms, it is physically impossible to recover the data without them\u2014even with the most advanced actual supercomputers. There are no known backdoors and no recovery options.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While the <strong>RAS-OAEP<\/strong> encryption <strong>can reuse the same Public key to encrypt files without security problems<\/strong>, beware that <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\"><strong>using AES-GCM encrypting files with the same password<\/strong><\/mark> for more than <strong>one single file<\/strong>, <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">it&#8217;s a &#8220;catastrophic failure&#8221;<\/mark> for AES-GCM. It allows an attacker to decrypt your files and forge signatures through XOR analysis.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-x-large-font-size wp-block-paragraph\"><strong>Gemini w3mypgp v7<\/strong>*:<br>easy <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\"><strong>hybrid<\/strong> RSA-OAEP + AES-GCM<\/mark> encryption\/decryption<\/p>\n\n\n\n<div style=\"height:12px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:clamp(1.696rem, 1.696rem + ((1vw - 0.2rem) * 2.007), 2.9rem);\"><strong>How To<\/strong><br>use <strong>RSA-OAEP + AES-GCM Hybrid<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>People that want to share super secret files\/messages have to download the same w3mypgp <a href=\"https:\/\/www.axew3.com\/w3\/forums\/viewtopic.php?t=2149\" target=\"_blank\" rel=\"noreferrer noopener\">HTML file<\/a>. <strong>Download and unzip the file<\/strong> then load it with your browser from your filesystem. Or for example you can load it on your browser from this url (that&#8217;s equally safe)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.axew3.com\/www\/deApps\/w3mypgp\/w3mypgp.html\"><strong>axew3.com w3mypgp.html<\/strong><\/a> <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Open <code>w3mypgp.html<\/code> in your browser to generate your Public\/Private key pair. Download and store these files in a secure location. Share your Public Key with anyone you wish to receive secure messages from; they will use it to encrypt files that only you can decrypt. <strong>Important:<\/strong> Only you, as the holder of the Private Key, can unlock the messages sent to you.<\/li>\n\n\n\n<li>Note that securely storing your Private Key file is <strong>entirely your responsibility<\/strong>. If an attacker discovers your Private Key (or the password, if it is password-protected using AES-GCM), the security of your files and messages will obviously be compromised. Additionally, keep in mind that attackers at various network levels can easily sniff or intercept your data\u2014and if they obtain your key, decrypt it as well.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Substantially:<\/strong><br><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Use the Private key to decrypt<\/mark><\/strong>, and <strong>share the Public with people<\/strong> that need to send you encrypted files\/or messages. <strong>Or<\/strong> <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">use the Public\/Private keys to encrypt<\/mark><\/strong>\/decrypt your own files.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-xx-large-font-size\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Examples:<\/mark><\/strong><\/h2>\n\n\n\n<p class=\"has-base-2-color has-contrast-background-color has-text-color has-background has-link-color wp-elements-1 wp-block-paragraph\"><strong>Example A:<\/strong><br>User <strong>A<\/strong> wants to send secrets files or typed text to User <strong>B<\/strong>.<br>&#8211; <strong>B<\/strong> sends his generated RSA-OAEP <strong>Public Key<\/strong> to <strong>A<\/strong>, which <strong>A<\/strong> uses to encrypt the files or messages.<br>&#8211; <strong>A<\/strong> sends the encrypted files to <strong>B<\/strong>. These can only be decrypted by <strong>B<\/strong>, who is the sole owner of the RSA-OAEP <strong>Private Key<\/strong>.<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-base-2-color has-contrast-background-color has-text-color has-background has-link-color wp-elements-2 wp-block-paragraph\"><strong>Example B:<\/strong><br>You wants to store secrets files into your hard drive.<br>&#8211; Encrypt using your generated RSA-OAEP <strong>Public Key<\/strong>.<br>&#8211; Decrypt using the RSA-OAEP <strong>Private Key<\/strong>.<\/p>\n\n\n\n<div style=\"height:35px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-x-large-font-size wp-block-paragraph\"><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">NOTE IMPORTANT:<\/mark><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">Maybe <strong>READ ALL<\/strong> <a href=\"https:\/\/www.axew3.com\/w3\/2025\/11\/super-secret-storage-of-network-files-and-messages\/\" target=\"_blank\" rel=\"noreferrer noopener\">this page<\/a> dedicated to the old Unicorn version, there are <strong>important security info<\/strong>:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-axew-3-com wp-block-embed-axew-3-com\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"XNn1sbyckk\"><a href=\"https:\/\/www.axew3.com\/w3\/2025\/11\/super-secret-storage-of-network-files-and-messages\/\">Secret encrypted storage of network files and messages<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"\u201cSecret encrypted storage of network files and messages\u201d \u2014 axew3.com\" src=\"https:\/\/www.axew3.com\/w3\/2025\/11\/super-secret-storage-of-network-files-and-messages\/embed\/#?secret=QgpzyxAIr7#?secret=XNn1sbyckk\" data-secret=\"XNn1sbyckk\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<div style=\"height:12px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h1 class=\"wp-block-heading has-xx-large-font-size\"><strong>Tips for staying super secret<\/strong><\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Maybe run the HTML file in <strong>your Browser in Private mode<\/strong>, so that any unencrypted processed data in the stack is immediately erased when you close the browser&#8217;s tab. Or click the <strong>Red reset button<\/strong>.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>If my device goes into wrong hands?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You should not store the generated <strong>Private key<\/strong> into the same device where the encrypted files\/messages resides if you do not delete the received\/shared messages or you stored encrypted files using these secret keys into your drive: but if it is the case, at least, you should password encrypt the generated file that contain the <strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-custom-cyan-1-color\">Private<\/mark><\/strong> key <strong>with a long and strong password<\/strong> using the <strong>AES-GCM<\/strong> Password <strong>Encrypt\/decrypt screen<\/strong>, if you do not know some other possible method to stay secret, obfuscating the Private key somewhere into your hard drive, so that if an attacker gains physical access to your device, analyzing the filesystem will have no success on find out the secret Private key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keeping everything client-side means we&#8217;re following a Zero-Knowledge Architecture, where a server never sees the unencrypted data or the Private Key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Bypasses the Clipboard:<\/strong> by loading from a file, the Password or the Private key <strong>never enters the system clipboard<\/strong>, protecting them from &#8220;Clipboard Sniffer&#8221; malicious installed apps on smartphones.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>**<\/strong> If you are a Windows OS user or Android or iOS (?) and you think that their encryption or decryption programs that you may use to encrypt files or Apps to send messages sets you secret and safe. If you think that there is another way than this to be secret, and you are not a security expert and a very advanced developer that coded all the necessaries routines from scratch without errors you are (probably) wrong.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>And remember<\/strong> again: it&#8217;s easy for someone at several network levels to sniff your data. And to decrypt your data. And for an analyst who picks up your device.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8211; Do not give them a chance.<\/p>\n\n\n\n<p class=\"has-x-large-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#ff0000\" class=\"has-inline-color\">RED ZONE:<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you lose your <strong>RSA-OAEP<\/strong> <strong>Private key<\/strong> or the <strong>AES-GCM passphrase<\/strong> (if using the pass encryption), there are no known bugs and there is <strong><mark style=\"background-color:rgba(0, 0, 0, 0);color:#ff0000\" class=\"has-inline-color\">NO<\/mark><\/strong> way to recover your encrypted files.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div style=\"height:9px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div style=\"height:12px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Crypto_API\">https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Crypto_API<\/a><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Take control of your internet. Use <a href=\"https:\/\/www.firefox.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Firefox<\/a><\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Why should you support and use Firefox? Along with the UNIX\/Linux world, it represents your digital freedom<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><a href=\"https:\/\/firefox-source-docs.mozilla.org\/contributing\/index.html\">https:\/\/firefox-source-docs.mozilla.org\/contributing\/index.html<\/a><\/p>\n\n\n\n<div style=\"height:1px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">&#x1f510;&#x2764;&#xfe0f; <strong>Built for absolute Privacy<\/strong> &#8211; <a href=\"http:\/\/www.paypal.me\/alessionanni\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Special thanks go here<\/strong><\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gemini w3mypgp v7.0 v7.2 (mission impossible) Privacy is a right, not a select option on a subscription page or a hidden clause in proprietary software. Updated on 10 Mar 2026 &#8211; Gemini w3mypgp v7.2 (mission impossible) Hybrid RSA-OAEP + AES-GMC w3mypgp Gemini v7* &#8211; Made again with &#x2764;&#xfe0f; for privacy w3mypgp Gemini v7.* You can [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-9921","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/comments?post=9921"}],"version-history":[{"count":3,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9921\/revisions"}],"predecessor-version":[{"id":11286,"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/pages\/9921\/revisions\/11286"}],"wp:attachment":[{"href":"https:\/\/www.axew3.com\/w3\/wp-json\/wp\/v2\/media?parent=9921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}