TOOLS / CONNECTED WORKFLOW

Key workspace.

Generate → KCV → TR-31. Transfers happen only when you press “Use in”. Keys stay in this page’s memory; refresh or leave to clear them.

1. Generate key

Key type

Uses your browser’s cryptographic random generator. DES/TDES keys have odd parity.

2. Check KCV

No key transferred.

KCV method

A KCV is a fingerprint. The clear key moves to the next step; the KCV is not a wrapping key.

3. Create TR-31 block

No key transferred.

Protection version

AES KBPK: 16, 24 or 32 bytes. Supply a separate protection key.

Algorithm follows the transferred key. Key version 00; non-exportable (N); no optional blocks. Choose usage and mode for your receiver. Full TR-31 calculator.

Test workbench, not an HSM or a separated-custodian key ceremony. JavaScript cannot guarantee secure memory erasure. No keys are put in URLs, cookies or browser storage.