Docs / StarVault guide / Universal Crypto Tools & Key / Cert Studio

Universal Crypto Tools & Key / Cert Studio

  • Cryptographic Workbench:
    • Symmetric Encryption & Decryption: Text & file encryption with AES-256-GCM. Features 📂 Load File into Input... (supports UTF-8 text, ASCII armor, or binary converted to Base64), 💾 Save Output to File..., and 1-click direct file encryption/decryption (.enc).
    • Interactive File Encryption Queue: Batch-encrypt and decrypt multiple files or entire folder trees with an interactive queue showing individual file sizes, remove buttons (✕), clear queue, alongside vs custom folder output destinations, and real-time progress.
    • Cryptographic Hashes: SHA-256, SHA-512, MD5, and HMAC-SHA256.
    • Data Encoders: Base64 Encode/Decode, Hex Encode/Decode, URL Encode/Decode.
    • UUID & Entropy: Cryptographically secure UUID v4 generation.
  • Key & Certificate Generation Studio & Key Studio:
    • Ed25519 Keypairs: Modern 256-bit elliptic curve SSH keys with OpenSSH and PuTTY (.ppk) export support.
    • WireGuard VPN Keypairs: X25519 public/private keys for VPN tunnels (.wg.pub / .wg.key).
    • Self-Signed X.509 TLS/SSL Certificates: Custom Common Names (CN), Subject Alternative Names (SANs), RSA / ECDSA / Ed25519 keys, and configurable validity periods (.crt / .key).
    • RSA-4096 & GPG / OpenPGP / Age: High-security RSA, armored OpenPGP keypairs (.asc), and modern Age encryption keys (.recipient.txt / .key).
    • Direct Vault Storage: 1-click button to save newly generated keys and certificates straight into your encrypted database keyring.
    • Local PC File & Bundle Export: Save individual public keys / certs or private keys straight to your computer with automatic file extension matching, or export both simultaneously via 📦 Export Keypair Bundle to Folder....
    • Local Key Installer & System Verifier: Select and install SSH, GPG, Age, WireGuard, and TLS keys directly onto your local Windows or Linux host:
      • Automated Security Hardening: Enforces strict permissions (NTFS ACLs restricted to current user on Windows; POSIX chmod 0600/0700 on Linux/macOS) with overwrite safeguards.
      • Exhaustive System Audits: Verifies file existence, SHA-256 bit-for-bit integrity, and syntax via OpenSSH ssh-keygen -l.
      • Agent & Host Integration: Automatically adds public keys to ~/.ssh/authorized_keys, creates ~/.ssh/config Host blocks, and registers keys into running ssh-agent or native GPG keyrings (gpg --import).
      • Local Key Scanner & Exporter: Scan and discover existing keys across local directories (~/.ssh, ~/.gnupg, etc.) to import into the vault, or bulk-export vault keys with an OpenSSH client configuration template or compressed .zip archive.

Updated 2026-10-31

An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.