AES Encrypt and Decrypt Playground

Encrypt and decrypt text locally with AES-GCM or AES-CBC, key import/export, IV handling, and test-vector helpers.

Encrypt or decrypt sample text without uploading keys, messages, IVs, or ciphertext. Choose AES-GCM for authenticated encryption examples, or AES-CBC when you need to reproduce older CBC test vectors and compatibility cases.

Plaintext or ciphertext input

AES key

IV / nonce

Operation

AES mode

Key encoding

Input/output encoding

IV encoding

GCM authentication tag length

Generated key size

Include report and exported key material

AES output

Key, IV, and operation report

How it works

AES is a symmetric block cipher: the same secret key encrypts and decrypts the data. This playground supports 128, 192, and 256-bit keys, generated locally or imported as text, hex, Base64, or Base64url bytes.

AES-GCM adds an authentication tag so modified ciphertext or the wrong key fails during decryption. AES-CBC is provided for compatibility and test-vector work; it does not authenticate the message, so production designs usually need a separate integrity check.

Keep every IV with its ciphertext so decryption can reproduce the operation. Do not reuse the same AES-GCM key and IV pair for different messages, and keep real production keys out of screenshots, tickets, and shared documents.

AES Encrypt and Decrypt Playground

How it works

References