All the reasons why this is a terrible idea are outlined here: http://www.matasano.com/articles/javascript-cryptography/