RSA Public & Private Key Pair Generator
Native Web Crypto API • PKCS#8 Private Key • SPKI Public Key • PEM Format
🛡️ 100% Client-Side Air-Gapped Privacy
All cryptographic computations run strictly inside your browser Web Crypto runtime. No keys or plaintexts ever leave your machine.
⚡ Hardware-Accelerated Web Crypto API
Leverages native C++ and hardware AES-NI / SHA instructions through browser APIs for zero-latency throughput.
Frequently Asked Questions & Security Specifications
What is the difference between 2048-bit and 4096-bit RSA keys?
2048-bit keys provide 112 bits of symmetric security, recommended by NIST through 2030. 4096-bit keys offer ~140 bits of security for long-term archiving, but require ~7x more CPU time for key generation and mathematical decryption.
What is the format of the generated PEM files?
The private key is exported as standard PKCS#8 DER and base64-wrapped with `-----BEGIN PRIVATE KEY-----`. The public key is exported as SPKI (SubjectPublicKeyInfo) wrapped with `-----BEGIN PUBLIC KEY-----` compatible with OpenSSL, Nginx, and SSH.
Can the browser securely generate 4096-bit primes without freezing?
Yes. The Web Crypto API (`crypto.subtle.generateKey`) runs asynchronously in native background worker threads of your browser's V8/SpiderMonkey engine.