CanDoItAll.Ledger.Cryptography.Browser
0.1.18
dotnet add package CanDoItAll.Ledger.Cryptography.Browser --version 0.1.18
NuGet\Install-Package CanDoItAll.Ledger.Cryptography.Browser -Version 0.1.18
<PackageReference Include="CanDoItAll.Ledger.Cryptography.Browser" Version="0.1.18" />
<PackageVersion Include="CanDoItAll.Ledger.Cryptography.Browser" Version="0.1.18" />
<PackageReference Include="CanDoItAll.Ledger.Cryptography.Browser" />
paket add CanDoItAll.Ledger.Cryptography.Browser --version 0.1.18
#r "nuget: CanDoItAll.Ledger.Cryptography.Browser, 0.1.18"
#:package CanDoItAll.Ledger.Cryptography.Browser@0.1.18
#addin nuget:?package=CanDoItAll.Ledger.Cryptography.Browser&version=0.1.18
#tool nuget:?package=CanDoItAll.Ledger.Cryptography.Browser&version=0.1.18
CanDoItAll.Ledger.Cryptography.Browser
Web Crypto and IndexedDB implementations for browser-based CanDoItAll Ledger accounts.
Use this Razor Class Library in Blazor WebAssembly applications that create,
import, unlock, and use locally encrypted account vaults. It implements the
platform-neutral cryptography and vault contracts from
CanDoItAll.Ledger.Cryptography.
Requirements
- .NET 10
- Blazor WebAssembly
- A secure browser context: HTTPS in deployed environments or trusted localhost
Install
dotnet add package CanDoItAll.Ledger.Cryptography.Browser
Register
using CanDoItAll.Ledger.Cryptography.Browser;
builder.Services.AddCanDoItAllBrowserCrypto();
The registration supplies:
BrowserLedgerCryptoDriverandILedgerCryptoDriver;BrowserIndexedDbAccountVaultStoreandIAccountVaultStore;AccountVaultService.
The driver imports its JavaScript module from:
_content/CanDoItAll.Ledger.Cryptography.Browser/candoitall-ledger-crypto.js
Do not add a manual script element for this module.
Browser Storage And Security
- IndexedDB storage is scoped to the browser origin. Changing scheme, host, or port creates a separate storage boundary.
- Users and browsers can clear IndexedDB. Provide an encrypted export and tested restore flow; there is no automatic password or key recovery.
- Private-key material is encrypted at rest. Vault ID, display name, address, algorithm, public key, KDF metadata, and timestamps remain plaintext. Unlocked keys are available to the running page for signing, so treat content-security policy, dependency safety, and XSS prevention as key-protection controls.
- Browser storage is local custody, not a server-side HSM or managed key vault.
- Never embed node API secrets or privileged signing keys in a published WASM application.
See the AccountApp reference host, base cryptography package, and project documentation.
This package is part of the CanDoItAll ecosystem and uses the repository's MIT License.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- CanDoItAll.Ledger.Cryptography (>= 0.1.18)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 10.0.10)
- Microsoft.JSInterop (>= 10.0.10)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.