💡 Also available as a web app at keylab.cloud — no installation required.

Every calculation runs locally in your browser/app — no data is sent to any server.

Encryption

• AES (ECB, CBC, CFB, OFB, GCM) · DES/3DES · RSA · ECC (ECDSA)
• Diffie-Hellman (DH & ECDH) · DSA & EdDSA (Ed25519, Ed448)
• Post-Quantum Crypto (ML-DSA, ML-KEM, SLH-DSA)

Hashing & Derivation

• MD5, SHA-1/2/3, RIPEMD-160, BLAKE2/3 · HMAC · Checksum (CRC16/32, Adler-32)
• Key Derivation (PBKDF2, HKDF)

Key Management

• KCV Calculator · Key Components (Split/Combine) · Key Validation
• Key Generator · Parity Enforcement · Key Encryption (Wrap/Unwrap)
• DUKPT — TDES (ANSI X9.24-1) & AES (ANSI X9.24-3)
• TR-31 Key Block · Thales Key Block · TR-34 Key Block

PIN

• PIN Block (ISO 9564 Format 0) · PIN Block Formats (0/1/2/3/4)
• PVV (Visa PVV) · PIN Translation · PIN Offset (IBM 3624) · ZKA

Card Security

• PAN Masking · Track Data Parser · BIN Lookup
• CVV/CVC Generation · CVV2/CVC2 Generation

MAC & EMV

• MAC ANSI X9.9/X9.19 · MAC ISO 9797-1
• EMV Tag Dictionary (300+ tags) · ARQC/ARPC · EMV Script Builder · TLV Parser

Parsers & Validators

• IBAN Validator · SWIFT/BIC Validator · X.509 Certificate Parser
• ASN.1 Decoder · ISO 8583 Parser · LUHN Validator

Utilities

• Data Converter (HEX/ASCII/Binary/Base64) · XOR Calculator · Hex Editor

SPB (Brazilian Payments)

• STR (TED) · SPI (PIX) · DICT

A fully interactive Thales payShield 10K simulator with:

• 111 console commands implemented — the same commands you'd run on a real HSM
• Physical key simulation — turn keys to switch between Online, Offline, and Maintenance modes
• Smart Card reader — 4 card slots, insert/remove cards, load LMK sets
• Real response codes — authentic payShield error codes and behavior
• Host commands — Easy and Real mode for learning and production simulation

Perfect for learning, training, development, and testing — without needing access to a real 50,000ドル+ HSM.

• All cryptography runs client-side — your keys and data never leave your machine
• Content Security Policy (CSP) enforced
• Context isolation and sandboxed renderer
• Secure credential storage via OS keychain (safeStorage)
• No telemetry, no tracking, no data collection
• Auto-updates via GitHub Releases (signed)

Start free at keylab.cloud/plans.

• Windows: 10+ (x64)
• macOS: 12+ (Apple Silicon)
• Linux: Ubuntu 20.04+ / Debian 11+ (x64) or any distro via AppImage

• 🌐 Web App: keylab.cloud
• 💼 LinkedIn: KeyLab
• 📧 Contact: keylab.cloud/contact

See Releases for full version history.