A full-spectrum, browser-based cryptography laboratory covering modern, classical, and post-quantum systems.

Browser demo: real Ed25519 signatures over JSON — showing that a signature binds an exact byte string, never the meaning a parser recovers from it.

Browser demo: a real X.509 hierarchy you validate by hand — showing that finding a chain and validating a chain are two different problems, and only one of them is about signatures.

Browser-based Merkle tree and inclusion proof demo — build trees up to 16 leaves with real SHA-256, generate O(log n) membership proofs, tamper any leaf and watch the root change, with Git, Bitcoin, and Certificate Transparency walkthroughs. Part of crypto-lab.

Browser demo: real Ed25519, HMAC, and X.509 verification driven by a movable clock — showing which security decisions silently depend on an input cryptography cannot authenticate.

Browser demo of approximate-hint LWE secret recovery on sparse ternary secrets. Computes hint counts; runs no attack. ePrint 2026/1081.

Browser-based SHA-256 vs SHA3-256 vs BLAKE3 internals — live avalanche analysis, Merkle-Damgård/sponge/tree construction diagrams, and timing benchmarks. Part of crypto-lab.

Browser-based 2-server XOR Private Information Retrieval (Chor et al. 1995) — a patron retrieves any book from a 16-item catalog without the server learning which one was requested. Real IT-PIR arithmetic, step-by-step query walkthrough, and privacy audit panel. Part of crypto-lab.

Browser demo for ML-KEM (CRYSTALS-Kyber), the post-quantum key encapsulation mechanism standardized as NIST FIPS 203 in August 2024.

Browser-based BLS12-381 pairing cryptography — bilinear pairing explainer, BLS signature sign/verify with real @noble/curves arithmetic, signature aggregation visualizer (up to 100 signers → 1 proof), and rogue key attack demo. Powers Ethereum 2.0 and Zcash. Part of crypto-lab.

Browser demo: real ML-KEM-768 decapsulation under malformed and adversarial ciphertexts — showing that a correctly-implemented KEM still gets destroyed by the code that calls it.

Browser-based KDF benchmarking — live timing and memory comparison of HKDF, PBKDF2, scrypt, and Argon2id with adjustable cost parameters and bar chart visualization. Part of crypto-lab.

Browser-based AES-GCM vs AES-GCM-SIV comparison — live nonce reuse attack showing keystream XOR recovery and GHASH key extraction, synthetic IV construction visualizer, and side-by-side misuse-resistance comparison. RFC 8452. Part of crypto-lab.

Browser-based LMS/HSS stateful hash-based signatures (NIST SP 800-208, RFC 8554) — 32-leaf key state grid, live LM-OTS reuse forgery, and a real two-level HSS with root-tree roll-over. LM-OTS core validated against RFC 8554 Appendix F. Part of crypto-lab.

Browser demo: one nonce reused under one key across CTR, AES-GCM, ChaCha20-Poly1305, and CBC — four constructions, four different catastrophes, none graceful.

Browser-based 1-of-2 Oblivious Transfer — the Simplest OT protocol (Chou-Orlandi 2015) over Curve25519 with real Edwards25519 (Ed25519) point arithmetic and AES-256-GCM encryption. Receiver gets exactly one message, sender learns nothing about which. Foundational primitive for secure MPC. Part of crypto-lab.

Browser-based Ed25519 keypair generation, signing, and signature verification — deterministic nonces, tamper detection, ZIP215 cofactor handling, and 64-byte compact signatures. Part of crypto-lab.

Browser-based ChaCha20 stream cipher — quarter-round stepper, keystream visualizer, nonce reuse attack demo, and encrypt/decrypt playground. ARX design, no AES-NI required. Part of crypto-lab.