Which technology should I use for client-side web encryption?
cperciva: All encryption will take place on the browser, using Open PGP standards. The server will see only encrypted data.You've already lost.  If someone can compromise your server, they can serve up a web page containing modified code.