System and method for web-browser based end-to-end encrypted messaging and for securely implementing cryptography using client-side scripting in a web browser

A method of verifying integrity of a root document in a set of files that define a web page, where said root document is downloaded from an untrusted web server to a user's web browser running on a computer that prevents entry of malicious code into said root document, said method comprising:

• providing said root document and making said root document available for download from said untrusted web server;
• downloading, by said user's web browser, said root document from said untrusted web server;
• obtaining, by said user's web browser, a cryptographic value from a trusted source, where said cryptographic value includes a reference hash;
• performing, by said user's web browser, a cryptographic analysis of the root document in conjunction with said cryptographic value, where said cryptographic analysis includes deriving a hash of the root document and comparing the derived hash with the reference hash;
• and
• verifying, by said user's web browser, the integrity of said root document only upon confirmation by said cryptographic analysis, where said confirmation includes confirming that the derived hash matches the reference hash.

A system that enables web browser-based end-to-end encryption of messages and files, said system comprising:

• a first computer associated with a sender;
• a second computer associated with a recipient;
• a first web browser running on said first computer associated with the sender, wherein said first web browser downloads a first set of files that defines a first web page, wherein said first set of files contains code for presenting a form for composing a message and wherein said first set of files contains a first client-side scripting for implementing message encryption;
• said sender composes the message by using said form;
• said first web browser executes said first client-side scripting to encrypt said message composed by said sender and to upload said encrypted message to a server;
• a second web browser running on said second computer associated with the recipient, wherein said second web browser downloads a second set of files that defines a second web page, wherein said second set of files contains code for displaying messages and wherein said second set of files contains a second client-side scripting that downloads said encrypted message from said server and decrypts said encrypted message and displays said decrypted message;
• said first set of files comprising a root document, wherein said system verifies integrity of said root document by performing a cryptographic analysis of said root document in conjunction with a cryptographic value obtained from a trusted source.

A system for verifying integrity of a root document in a set of files that define a web page, where said root document is downloaded from an untrusted web server to a web browser that prevents entry of malicious code into said root document, said system comprising:

• a computer associated with a user;
• a root document that is made available for download from said untrusted web server;
• a user's web browser, running on said computer, that downloads said root document from said untrusted web server;
• a cryptographic value that is obtained, by said user's web browser, from a trusted source, where said cryptographic value comprises a public key and a digital signature;
• and
• wherein the integrity of said root document of said set of files is verified by performing a cryptographic analysis on said root document, where said cryptographic analysis comprises verifying said digital signature of said root document by using said public key, wherein said user's web browser performs said cryptographic analysis and verify the integrity of said root document.

A system for verifying the integrity of a root document in a set of files that define a web page, where said root document is downloaded from an untrusted web server to a user's web browser that prevents entry of malicious code into said root document, said system comprising:

• a computer associated with a user;
• said root document that is made available for download from said untrusted web server;
• said user's web browser, running on said computer, that downloads said root document from said untrusted web server;
• a cryptographic value that is obtained, by said user's web browser, from a trusted source, where said cryptographic value includes a reference hash;
• and
• wherein the integrity of said root document is verified by performing a cryptographic analysis on said root document, where said cryptographic analysis comprises deriving a hash of the root document and comparing the derived hash with the reference hash;
• and
• wherein said user's web browser verifies the integrity of said root document only upon confirmation by said cryptographic analysis that the derived hash matches the reference hash.

A method for verifying the integrity of a root document in a set of files that define a web page, wherein said root document is downloaded from an untrusted web server to a user's web browser that prevents entry of malicious code into said root document, said method comprising:

• providing said root document and making said root document available for download from said untrusted web server;
• downloading, by said user's web browser, said root document from said untrusted web server;
• obtaining, by said user's web browser, a cryptographic value from a trusted source, where said cryptographic value comprises a public key and a digital signature;
• performing, by said user's web browser, a cryptographic analysis of said root document in conjunction with said cryptographic value, where said cryptographic analysis comprises verifying said digital signature of said root document by using said public key;
• and
• verifying, by said user's web browser, the integrity of said root document by verifying said digital signature of said root document using said public key.