Particle Lab
Post-quantum tools, no account needed.
Everything runs in this tab. Keys and the activity log live in memory and disappear when you close or reload it. Download a key file if you need to keep one.
- 01VaultSeal text or files to a hybrid post-quantum key, then open them again.X-Wing · AES-256-GCM
- 02SignaturesSign a message, change one character or bit, and watch verification fail.ML-DSA-65
- 03HandshakeStep through a key exchange over an open wire, with or without an eavesdropper.ML-KEM-768
- 04ScannerPaste a certificate or key and find out whether it survives a quantum attacker.X.509 · SSH · JWK
- 05BenchmarkTime post-quantum and classical algorithms on the device you are using.ML-KEM · ML-DSA · SLH-DSA
01 · Vault
Encrypt text or a file with a hybrid post-quantum key.
X-Wing (ML-KEM-768 + X25519) wraps a fresh AES-256-GCM key. Only the matching secret key can open the result.
Results appear here. Encryption needs a public key; decryption needs the secret key.
02 · Signatures
Sign a message with ML-DSA-65, then try to forge it.
ML-DSA (FIPS 204) is the post-quantum replacement for ECDSA and RSA signatures. Change a single character, or flip one bit of the signature, and verification fails.
Generate a key, sign the message, then edit it and verify again.
03 · Handshake
Watch two parties agree on a key over an open wire.
Real ML-KEM-768, one step at a time. Turn on the eavesdropper to see what someone in the middle ends up with.
Alice
Press Next step to begin.
Eavesdropper
Bob
- Key pair
- Send public key
- Encapsulate
- Decapsulate
04 · Readiness scanner
Find out whether a key or certificate survives a quantum attacker.
Paste a PEM certificate, a public key, an SSH key or a JWK. Particle reads the algorithm and size and tells you what to replace it with.
Nothing scanned yet. Paste key material or load a sample.
05 · Benchmark
Measure the cost of post-quantum crypto on this device.
Timings come from your browser, not from us. Post-quantum rows run in pure JavaScript; the RSA and ECDSA rows use the browser's native code, so they start with an advantage.
Press Run benchmark. It takes a few seconds and runs in a background thread, so the page stays usable.
Cryptography by noble-post-quantum (MIT). Not independently audited; do not protect production secrets with the Lab yet.