说都不会话了。
Babble is a platform agnostic browser extension that allows for easy encryption and decryption of text data across the web. With Babble, users can create encryption keys from passwords, encrypt text with any of these keys, and decrypt any ciphertext they have a key for. Babble is meant to be dead simple to use, so people of all backgrounds have the ability to encrypt sensitive data on any service.
A list of supported websites can be found here.
Babble uses Argon2i algorithm to
generate a 256-bit encryption key (with salt BabbleBabbleBabb). The key
derivation process is slow (takes about 0.5-2s in the browser) to prevent brute
force attack. The encryption algorithm is
ChaCha20-IETF-Poly1305.
The cipher text is then (byte-by-byte) encoded to UTF-8 characters using a
256-character base. The default base is 256 Chinese characters taken from a
frequency table. You can use whatever base you'd like, as long as it's 256 UTF-8
characters and only contains unique characters.
Decryption can begin when the unlock icon inside of the Babble popup is clicked. This action launches the element picker, highlighting the DOM element under the cursor purple. The extension will walk the DOM starting at that element looking for data to decrypt.
Babble operates under the assumption that every website is running hostile
JavaScript. To that end, when the element picker is started, an iframe is
created whose source is a web accessible
resource.
All ciphertext targeted for decryption is transferred to the iframe, where it
is then decrypted and displayed to the user. Web accessible resources are
utilized because they have unique protocols (chrome-extension:// on Chromium
or moz-extension:// on Firefox), and protect our plaintext from being
exfiltrated by malicious Javascript the on page by the same-origin
policy.