AES-GCM Encrypt / Decrypt (Go-compatible)

Encrypt or decrypt text with AES-GCM using the ciphertext+tag+nonce payload format compatible with Go/Python EncryptorImpl implementations

Your input is processed locally and never sent to our servers.

Plaintext

Key (UTF-8 text, 16 / 24 / 32 bytes)

Deterministic nonce (testing only — not secure, produces the same ciphertext every time)

Ciphertext (Base64)

Algorithm: AES-GCM (authenticated encryption, 96-bit nonce, 128-bit tag)

Payload format: Base64(ciphertext ++ tag ++ nonce[12 bytes]) — nonce is appended at the end, matching the Go/Python EncryptorImpl reference implementation, not the nonce-first format used by the RSA / AES Encrypt & Decrypt tool.

Key: entered as UTF-8 text; must be exactly 16, 24, or 32 bytes (AES-128 / 192 / 256).

Deterministic mode reuses a fixed nonce for reproducible test fixtures — never use it for real data, since reusing a nonce with the same key breaks AES-GCM's security guarantees.