Full OpenSSL v3.6.1 environment: keygen, certificates, CSR, KEM, signing, KDF, encryption — all via WASM

Client–server TLS 1.3 handshake simulator: configure cipher suites, key exchange groups, mTLS, PQC and hybrid certificates

All 12 FIPS 205 parameter sets with pre-hash support

LMS and XMSS stateful signature trees using SoftHSMv3

ML-KEM + X25519 ECDH + HKDF hybrid encryption pipeline

ML-KEM + AES key wrap in a KMS envelope encryption pattern

Compare ML-DSA, ECDSA, and RSA signing in a token migration workflow

Build a TEE-to-HSM trusted channel with ML-DSA + ML-KEM + AES wrap

ML-DSA-87 UEFI secure boot firmware signing and verification

NIST SP 800-108 counter-mode key derivation — applicable to KEM secrets, PSK, QKD, and password-derived keys

Full IKEv2 handshake in WASM with PKCS#11 crypto routed through softhsmv3. Inspect live C_* calls, ECDH key exchange, and PSK authentication between initiator and responder.

Web Crypto + OpenSSL DRBG random generation with statistical analysis

NIST SP 800-90B entropy test suite: monobit, frequency, min-entropy

Simulates quantum random number generation patterns using CSPRNG statistical analysis. Note: runs in-browser via Web Crypto — not a physical QRNG device.

SP 800-90C source combining: XOR, Hash, HMAC, Concat + HKDF/Hash_df/AES-CMAC conditioning via SoftHSMv3

Interactive visualization of HMAC_DRBG internal state (Instantiate, Generate, Reseed) complying with NIST SP 800-90A.

Build a full certificate chain hands-on: CSR → Root CA → cert issuance → parsing → CRL

Generate and compare six X.509 hybrid certificate formats via SoftHSM PKCS#11 + real DER encoding

Build trees, generate inclusion proofs, verify with tamper detection, compare PQC cert sizes, and simulate Certificate Transparency logs

Complete digital identity lifecycle: Wallet, PID Issuance, Attestation, RP Verification, and QES Provider.

secp256k1 ECDSA keypair, SHA256 + RIPEMD160, transaction signing

Ed25519 keypair generation and transaction signing

BIP39 mnemonic + BIP32/SLIP-0010 multi-coin HD key derivation

ECDH + ANSI X9.63-KDF + AES subscriber concealment for 5G networks