RSA, Ed25519, and PGP Key Generation

Understanding Keypairs

Public-key cryptography uses mathematically related keys.

Public key: Can be distributed to other people.

Private key: Must be protected from unauthorized access.

Depending on the algorithm, keys may be used for encryption, decryption, signing, or signature verification.

RSA Keypair Generator

The RSA tool generates RSA-OAEP keypairs using the Web Crypto API.

Supported Key Sizes

Usage

1. Select RSA Keypair.
2. Choose a key size.
3. Click Generate RSA Keypair.
4. Save the generated key files.

Output Files

rsa_private.pem
rsa_public.pem

Algorithm Configuration

Example PEM Structure

Public key:

-----BEGIN PUBLIC KEY-----
[Base64-encoded public key data]
-----END PUBLIC KEY-----

Private key:

-----BEGIN PRIVATE KEY-----
[Base64-encoded private key data]
-----END PRIVATE KEY-----

The generated RSA keys are configured for encryption and decryption.

They are not generated as RSA-PSS signing keys.

Security Considerations

Larger RSA keys generally require more computation.

The downloaded private key is not encrypted with a password by this tool.

Protect the file carefully.

Ed25519 Keypair Generator

Ed25519 is a digital signature algorithm.

Usage

1. Select Ed25519 Keypair.
2. Click Generate Ed25519 Keypair.
3. Save both PEM files.

Output

ed25519_private.pem
ed25519_public.pem

Key Capabilities

Ed25519 uses a fixed-size key format rather than a selectable RSA-style modulus length.

Browser Compatibility

Native Ed25519 support depends on the browser's Web Crypto implementation.

Key generation can fail if the algorithm is unavailable.

Important

The private key is exported in unencrypted PKCS#8 PEM form.

Store it securely.

PGP Keypair Generator

The PGP tool generates OpenPGP-compatible keys using OpenPGP.js.

Usage

1. Select PGP.
2. Enter a name.
3. Enter an email address.
4. Optionally provide a comment.
5. Choose whether to protect the private key with a passphrase.
6. Select an algorithm.
7. Optionally set an expiration period.
8. Click Generate PGP Keypair.

Required Fields

Supported Algorithms

For the Ed25519 option, the implementation requests an Ed25519 primary key and Curve25519 encryption subkey.

Key Expiration

Enter a positive number of days to request key expiration.

Leave the field empty or use zero for no configured expiration.

Files Generated

pgp_public.asc
pgp_private.asc
pgp_revocation.asc

The revocation certificate is downloaded when returned by OpenPGP.js.

Fingerprint

The result window displays the generated public key's fingerprint.

A fingerprint is a compact identifier derived from the key.

It is useful when confirming that a public key belongs to the intended person.

Passphrase Protection

The PGP generator enables passphrase protection by default.

If protection is enabled, a passphrase is required.

The resulting private key is armored and protected using OpenPGP's key-protection format.

Revocation Certificate

A revocation certificate allows the key owner to publish revocation information if the corresponding key should no longer be trusted.

Keep the certificate separately and securely.

Choosing a Key Type

Key Management Best Practices

• Never publish a private key.
• Back up private keys securely.
• Use a strong PGP private-key passphrase.
• Verify public-key fingerprints through trusted channels.
• Protect revocation certificates.
• Avoid confusing native PEM keys with OpenPGP armored keys.

Important: The native RSA and Ed25519 generators do not output interchangeable OpenPGP key files. Use PGP Keypair generation when you need OpenPGP-compatible keys.