Run real cryptography in your browser
Pick a category on the left, jump into a full playground, or start with what fits your role. Nothing is installed — every operation executes locally via WebAssembly.
What this means for you
- Executive / Business Leader
- This is an engineering workbench; the banner at the top says why crypto-agility is a board cost-and-risk decision and links to the Compliance landscape, and your featured cards are the HSM Capacity and Cert Capacity calculators.
- GRC / Risk & Compliance
- Your featured cards are the Cert Capacity and HSM Capacity calculators — sizing evidence for a migration plan; the banner at the top links to the Compliance landscape and Migration framework for the obligations themselves.
- Developer / Engineer
- Start from "I want to…" — Sign / verify, Key exchange, Generate keys, Certificates / PKI — or a category on the left; your featured cards include Hybrid Signature Spectrums, and the Beginner / Advanced chips set the depth.
- Security Architect
- Your featured cards are TEE-HSM Secure Channel, key derivation and the HSM Capacity Calculator; the KMIP Control Plane card at the bottom flips a crypto-agility policy and shows the same operations switch to PQC.
- Researcher / Academic
- Your featured cards are Source Combining, Stateful Hash Signatures and more; "Size / benchmark" under "I want to…" collects the measurement tools, and the "Sandbox" chip shows which tools run in a container rather than the browser.
- Certification & Validation Engineer
- Your featured cards are Entropy Testing, SP 800-90A DRBG and Firmware Signing; the PKCS#11 HSM card is where the ACVP validation suite lives.
- IT Ops / DevOps
- Your featured cards are the PQC VPN Simulator, HSM Capacity Calculator and Hybrid Certificates; "Runs on this device" hides tools that need the sandbox, and "Sandbox runtime" in the left rail shows whether you have container access.
- Curious Explorer
- Your featured cards are the Merkle Tree Workshop and PKI Workshop; a notice explains that advanced controls are folded away but everything still runs real cryptography in your browser, and the Beginner chip keeps the list gentle.
I want to…
Full playgrounds and picks
Interactive Playground
Keygen, KEM, signing and hashing — live via WebAssembly.
ML-KEM · ML-DSA · AES
PKCS#11 HSM
Real PKCS#11 v3.2 on SoftHSM WASM, dual-engine cross-validation.
SoftHSM · ACVP
KMIP Control Plane
Flip a crypto-agility policy, watch ops switch to PQC.
KMIP 3.0 · WASM
Developer Sandbox
SandboxDocker-backed protocol scenarios and a PKCS#11 dev catalog — compare the same op in 5 languages.
Docker · 5 languages
HSM Capacity Calculator
Size your HSM fleet for the top 10 enterprise use cases. Compare classical vs next-gen PQC HSM, tune per-algorithm TPS, and see whether your fleet is sufficient.
RSA-2048 · ECDSA P-256 · ECDH P-256
Cert Capacity Calculator
Model storage, bandwidth, and CPU impact of migrating your PKI to ML-DSA — adjust cert counts and renewal cadence.
RSA-2048 · ECDSA P-256 · ML-DSA-44
PKI Workshop
Build a full certificate chain hands-on: CSR → Root CA → cert issuance → parsing → CRL
RSA · EC · ML-DSA
Good places to start
Set your role for tailored picks
Web Crypto + OpenSSL DRBG random generation with statistical analysis
Simulation — no QRNG hardware involved. Compares a simulated QRNG sample (crypto.getRandomValues() output, not a quantum source), live Web Crypto output and a deliberately broken PRNG on the same grouped checks, which cannot show whether any source is quantum.
Model storage, bandwidth, and CPU impact of migrating your PKI to ML-DSA — adjust cert counts and renewal cadence.
KMIP Control PlaneFeatured
A full KMIP 3.0 control plane + PKCS#11 HSM in WebAssembly. Flip a crypto-agility policy and watch the same operations switch to PQC.
Browse all 62 Crypto Lab pages
Related content
Next step
Learn the theory behind the toolsEvery Playground tool links to the Learn module it practises.