Real
- AES-GCM-256 encryption via Web Crypto's
SubtleCrypto.encrypt. The same primitive macup Backup uses on your Mac. - PBKDF2 key derivation (200k SHA-256 iterations) from the demo passphrase.
- SHA-256 content hashing for chunk addressing and dedup.
- Chunk-level deduplication. The second backup genuinely uploads only the changed chunk.
- Byte-level restore verification. Each chunk is re-hashed after decryption; any mismatch throws.