Browser-based cryptography demos — no backends, no accounts, just the math.
A curated collection of single-concept cryptography demonstrations. Each one isolates a real primitive or protocol and makes it interactive in the browser. Classic algorithms, post-quantum schemes, zero-knowledge proofs — all grounded in real specifications, not toy reimplementations.
Live → https://systemslibrarian.github.io/crypto-lab/
| Project | Concept | Primitives |
|---|---|---|
| Snow 2 | Stream Cipher | XChaCha20-Poly1305 · Argon2id · HKDF-SHA-256 · Steganography |
| Quantum Vault KpqC | Post-Quantum | AES-256-GCM · Shamir SSS · SMAUG-T · HAETAE |
| Project | Category | Stack |
|---|---|---|
| Iron Letter | Asymmetric Encryption | ECIES P-256 · RSA-OAEP · AES-256-GCM |
| X3DH Wire | Asynchronous Key Agreement | X3DH · X25519 · HKDF-SHA-256 · Signal Protocol |
| Corrupted Oracle | Backdoored RNG | Dual_EC_DRBG · HMAC-DRBG · ChaCha20-DRBG · P-256 |
| Iron Serpent | Block Cipher | Serpent · AES-256 · SPN |
| AES Modes | Block Cipher Modes | AES · AES-GCM · AES-CBC · Authenticated Encryption |
| Padding Oracle | CBC Padding Oracle | AES-CBC · PKCS#7 · Vaudenay 2002 · POODLE |
| BIKE Vault | Code-Based KEM | BIKE · QC-MDPC · Post-Quantum · KEM |
| HQC Vault | Code-Based KEM | HQC · Reed-Muller · Reed-Solomon · Post-Quantum |
| Shadow Vault | Deniable Encryption | Argon2id · ChaCha20-Poly1305 · SHA-256 |
| Biham Lens | Differential Cryptanalysis | Differential Cryptanalysis · SPN · DDT · Chosen-Plaintext |
| Ed25519 Forge | Digital Signatures | Ed25519 · Deterministic Nonces · ZIP215 · Cofactor |
| Curve Lens | Elliptic Curves | ECC · Curve25519 · ECDH · P-256 |
| Dad Mode Morse | Encrypted Morse | AES-256-GCM · Argon2id · HKDF-SHA-256 · Ed25519 |
| Format Ward | Format-Preserving Encryption | FF1 · FF3-1 · AES-256 · Tokenization |
| Ratchet Wire | Forward-Secret Messaging | Double Ratchet · X25519 · HKDF · AES-256-GCM |
| SPHINCS+ Ledger | Hash-Based Signatures | SLH-DSA · SPHINCS+ · SHA-256 · FORS |
| Babel Hash | Hash Functions | SHA-256 · SHA3-256 · BLAKE3 · HMAC |
| Hash Zoo | Hash Internals | SHA-256 · SHA3-256 · BLAKE3 · Merkle-Damgård · Sponge |
| Dead Sea Cipher | Historical Cipher | Substitution · Transposition · Atbash |
| Blind Oracle | Homomorphic Encryption | TFHE-rs |
| Hybrid Wire | Hybrid Key Exchange | X25519 · ML-KEM-768 · HKDF-SHA256 · AES-256-GCM |
| Oblivious Shelf | IT-PIR Library Privacy | XOR PIR · Chor et al. 1995 · 2-Server PIR · Privacy Audit |
| KDF Arena | KDF Benchmarks | HKDF · PBKDF2 · scrypt · Argon2id |
| KDF Chain | Key Derivation | HKDF · PBKDF2 · scrypt · Argon2id |
| Patron Shield | Library Privacy | IT-PIR · XOR Secret Sharing · Chor et al. 1995 |
| Poly1305 MAC | MAC Primitive | Poly1305 · GF(2¹³⁰−5) · Key-Reuse Attack · Polynomial Stepper |
| Merkle Vault | Merkle Trees | SHA-256 · Merkle Tree · Inclusion Proofs · Certificate Transparency |
| MAC Race | Message Authentication | HMAC · CMAC · Poly1305 · GHASH |
| Noise Pipe | Noise Protocol Framework | X25519 · HKDF · WireGuard · Handshake Patterns |
| Nonce Guard | Nonce Misuse Resistance | AES-GCM · AES-GCM-SIV · RFC 8452 · Synthetic IV |
| OT Gate | Oblivious Transfer | Simplest OT · Chou-Orlandi 2015 · X25519 · AES-256-GCM |
| Pairing Gate | Pairing Cryptography | BLS12-381 · BLS Signatures · Signature Aggregation · Rogue Key Attack |
| Quantum Vault KpqC | Post-Quantum | AES-256-GCM · Shamir SSS · SMAUG-T · HAETAE |
| Kyber Vault | Post-Quantum KEM | ML-KEM · CRYSTALS-Kyber · Lattice · AES-256-GCM |
| McEliece Gate | Post-Quantum KEM | Classic McEliece · Goppa Codes · Post-Quantum |
| Dilithium Seal | Post-Quantum Signatures | ML-DSA · CRYSTALS-Dilithium · Lattice |
| Falcon Seal | Post-Quantum Signatures | Falcon · NTRU · FFT Sampling · Post-Quantum |
| RSA Forge | Public-Key Cryptography | RSA · OAEP · PSS · PKCS#1 |
| Shamir Gate | Secret Sharing | Shamir SSS · Lagrange Interpolation · GF(p) |
| Shamir Visual | Secret Sharing Visualizer | Shamir SSS · Lagrange Interpolation · Polynomial Graph |
| Silent Tally | Secure MPC | Shamir SSS · GF(2⁶¹−1) · Lagrange Interpolation · Additive Homomorphism |
| LMS Ledger | Stateful Hash-Based Signatures | LMS · HSS · W-OTS+ · NIST SP 800-208 |
| Phantom Vault | Stateless Passwords | PBKDF2-SHA-256 · HMAC-DRBG · Rejection Sampling |
| ChaCha20 Stream | Stream Cipher | ChaCha20 · ARX · Nonce Reuse · Keystream |
| Snow 2 | Stream Cipher | XChaCha20-Poly1305 · Argon2id · HKDF-SHA-256 · Steganography |
| FROST Threshold | Threshold Signatures | FROST (RFC 9591) · Ed25519 · Nonce Commitments · VSS Commitments |
| Timing Oracle | Timing Side-Channel | Timing Attack · HMAC · RSA · Cache-Timing |
| ZK Proof Lab | Zero-Knowledge Proofs | Schnorr · SHA-256 Commitments · Fiat-Shamir · zk-SNARK |
These sit outside the browser-demo scope of Crypto Lab but belong to the same collection:
- Crypto Compare — Algorithm reference covering NIST and PQ-Safe standards.
- Cipher Museum — An interactive museum spanning 2,500 years of cryptographic history. Ten halls, 37 ciphers, live encryption demos, and cryptanalysis labs.
- Meow Decoder — Secure optical air-gap file transfer via QR-code GIFs. AES-256-GCM + Argon2id + ML-KEM-1024 + fountain codes. Python + Rust.
Each demo is self-contained: one concept, one repository, full source. Documentation and threat models are included where the attack surface warrants it.
Built by Paul Clark — IT Librarian & Systems Analyst.
So whether you eat or drink or whatever you do, do it all for the glory of God. — 1 Corinthians 10:31