Ah, and just the subtle crypto API to generate keys? Or are you not generating them on the client?