Chrome-App-Bound-Encryption-Decryption

This project, 'Chrome-App-Bound-Encryption-Decryption', serves as a proof-of-concept demonstrating how to achieve application-bound encryption and decryption directly within the Google Chrome browser environment. It addresses the challenge of securely handling sensitive data in web applications by ensuring that encrypted data can only be accessed and decrypted by the specific application that encrypted it, on the same machine. This is achieved through a sophisticated architecture involving a Chrome extension, a native host application, and Windows Data Protection API (DPAPI). The core functionality relies on Chrome's Native Messaging API, which enables the Chrome extension to communicate securely with a locally installed native application. This native application, written in C#, then leverages the Windows DPAPI to perform the actual encryption and decryption. DPAPI provides a robust mechanism for data protection, allowing data to be encrypted in such a way that it is bound to a specific user, machine, or even a specific application, enhancing the overall security posture of sensitive information handled by the web application.