End-to-End Encrypted Messaging System for Clinical Teams

Clinical teams routinely discuss patients over channels never designed for medical confidentiality, and every unencrypted message is a liability for the organization and a risk to the patient. This project builds a messaging platform where privacy is enforced by cryptography rather than policy. The intern implements AES-based end-to-end encryption so messages are readable only by their intended participants, never by the server that relays them. Password storage uses salting and key derivation functions, session and authentication management follow hardened practices, and the intern implements core cryptographic algorithms directly to understand what libraries usually hide. A brute-force attack simulation module demonstrates concretely why the chosen parameters resist real adversaries. The stack combines a Node.js backend, MongoDB persistence, Python tooling for the cryptographic and attack-simulation components, and a React interface for the messaging experience. The project turns abstract security concepts into implemented, testable code. The intern finishes able to explain and defend an end-to-end encryption design, a rare and credible skill for security-focused roles in healthcare technology and beyond.