A New Cryptographic Standard for JavaScript
JFES brings the Fractal Encryption Standard directly into the JavaScript environment.
It is a complete JavaScript implementation of the FES cryptographic engine, designed to run directly in modern browsers and in Node.js.
FES Encryption Has Arrived in JavaScript
JFES is not a JavaScript wrapper around another encryption engine. The FES transformation engine itself is a dedicated implementation in JavaScript.
The same core engine can therefore be deployed across browser and server-side JavaScript environments, providing a common cryptographic implementation from the client to the server.
JFES is delivered as a practical public software artifact: an executable application, a documented API, Public Silos, configurable transformation passes, and a formal licence.
JFES Encryption
The JFES application provides a direct working environment for encryption and decryption.
Select a Silo, select the number of passes, enter a password and payload, and transform the payload directly in your browser.
JFES Gauge
The JFES Gauge provides the public instrumentation environment for examining JFES fractal streams and their statistical properties.
Raw streams can be downloaded for independent analysis using your own tools.
Download
A Different Cryptographic Architecture
FES does not follow the conventional fixed-block cipher model. The payload is transformed as a whole using a fractal stream generated through navigation of a Silo-defined fractal domain.
The password is used to identify the fractal portal. It does not become a retained encryption key and does not touch the payload.
Once the portal has been identified, the password can be discarded. The cryptographic stream is then generated through the fractal navigation process.
Whole-of-Payload Transformation
JFES applies the FES transformation across the complete payload. There is no AES-style fixed block structure imposed on the data.
The transformation can also be repeated through multiple passes. JFES supports between one and four passes.
Fractal Streams
The cryptographic stream emerges through deterministic fractal navigation within the password/silo/OTP selected cryptographic domain.
Silo Isolation
Silos define independent and exclusive cryptographic domains. Ciphertext generated with one domain cannot be decrypted with any other domain.
Multiple Passes
JFES supports one to four transformation passes, configurable through the public API.
Whole-of-Payload
The complete payload is transformation by a payload x passes length fractal stream, rather than being divided into independent fixed-size cipher blocks.
Built for JavaScript
JFES is delivered as pure JavaScript. The core jfes.js engine can run directly in any browser and can also be loaded by Node.js. without dependencies.
Browser
JFES runs directly in the browser and exposes the FES API to the application.
Node.js
The same JFES engine can run server-side. Node.js provides the environment-specific filesystem access required to load Silo JSON.
The cryptographic implementation does not need to be rewritten for each JavaScript environment.
The JFES API
JFES deliberately exposes a compact developer interface:
const FES = {
fractalSBox: true,
setPasses: setPasses,
setSiloPath: setSiloPath,
encryptFES: encryptFES,
decryptFES: decryptFES
};
Applications select the active Silo and number of passes, then use the encryption and decryption functions. The fractal navigation, stream generation and transformation machinery remain inside the JFES engine.
Public Silos
The public JFES distribution includes ten Public Silos.
Licensed deployments can generate additional Silos through their licensed account, providing separate cryptographic domains for applications, organisations, departments, communications and other operational requirements.
Designed for Developers
JFES.js is a cryptographic software component.
Developers can operate the public JFES application, select a Silo, configure transformation passes, encrypt and decrypt payloads, and integrate the documented API into their own JavaScript applications.
The production JFES engine can also be distributed in its protected JavaScript form for deployment in supported environments.
JFES Delivers Every FES World First — Through JavaScript
JFES exposes the FES cryptographic architecture directly to JavaScript developers. The four FES World Firsts are therefore available as executable capabilities within browser and Node.js applications.
100% Shannon OTP Compliance
Shannon's three requirements for a perfect secrecy / one-time pad system are:
- The key is truly random.
- The key is at least as long as the message.
- The key is used only once.
JFES performs whole-of-payload transformation using a same-length fractal stream. Every encrypt creates unique cipher.
The resulting security property is logical impossibility rather that is impenetrability.
Custom Multi-Dominion Cryptography
JFES applications operate within independent Silo cryptographic domains. A Silo defines its own fractal mapping and cryptographic environment. It delivers:
- Cryptographic compartmentalisation.
- Organisation level cryptographic isolation.
- The solution to cryptographic monoculture.
The same password used against different Silos does not enter the same cryptographic domain or produce a related transformation.
A New Entropy Paradigm
JFES implements Hyperchaotic Fractal Navigation (HFN) to generate the cryptographic stream through fractal navigation.
The stream is generated from fractal-geometric infinity rather than being stored and transported as a conventional cryptographic stream or retained random seed.
Configurable State-Space
JFES inherits configurable FES state-space architecture. Cryptographic state-space is configurable rather than constrained to a fixed conventional key size.
The computational depth of the underlying fractal architecture is therefore an implementation parameter, not a fixed property of the JavaScript API.
Non-commercial version is fixed at 2048 bits.
Compare JFES with AES
JFES implements a new Cryptographic Art & Science.
| JFES | AES | |
|---|---|---|
| Encryption model | Whole-of-payload transformation | Fixed 128-bit block cipher |
| Cryptographic stream | Fractal stream generated through FES navigation | Key-driven block transformation |
| Key / password | Password identifies the fractal portal; it does not touch the payload | Key directly drives the cipher |
| Key State Space | Non-commercial 2048 bits, commercial is configurable | 128, 192 and 256 bits |
| Domain separation | Silo-based cryptographic domains | No equivalent Silo architecture |
| Passes | Non-commercial 1–4, commercial is configurable | Fixed cipher structure |
| Security foundations |
Computational Difficulty
Shannon OTP Perfect Secrecy / Logic Impossibility |
Computational Difficulty |
| Perfect secrecy | Shannon OTP Perfect Secrecy / Logic Impossibility | — |
| Implementation | JavaScript; browser and Node.js | Dedicated platform implementations |
| Quantum Safe | Yes | No |
JFES Distribution
The JFES download contains the demonstration encryption application, the JFES JavaScript engine and its Silo resources. The Gauge remains online as the public instrumentation environment.
Documentation
Developer
JFES Developer documentation and software licence.
JFES Cryptographic Quality
Papers and studies of JFES cryptographic quality.