Docs / StarVault guide / Universal Crypto Tools & Key / Cert Studio
Universal Crypto Tools & Key / Cert Studio
- Cryptographic Workbench:
- Symmetric Encryption & Decryption: Text & file encryption with AES-256-GCM. Features
📂 Load File into Input...(supports UTF-8 text, ASCII armor, or binary converted to Base64),💾 Save Output to File..., and 1-click direct file encryption/decryption (.enc). - Interactive File Encryption Queue: Batch-encrypt and decrypt multiple files or entire folder trees with an interactive queue showing individual file sizes, remove buttons (
✕), clear queue, alongside vs custom folder output destinations, and real-time progress. - Cryptographic Hashes: SHA-256, SHA-512, MD5, and HMAC-SHA256.
- Data Encoders: Base64 Encode/Decode, Hex Encode/Decode, URL Encode/Decode.
- UUID & Entropy: Cryptographically secure UUID v4 generation.
- Symmetric Encryption & Decryption: Text & file encryption with AES-256-GCM. Features
- Key & Certificate Generation Studio & Key Studio:
- Ed25519 Keypairs: Modern 256-bit elliptic curve SSH keys with OpenSSH and PuTTY (
.ppk) export support. - WireGuard VPN Keypairs: X25519 public/private keys for VPN tunnels (
.wg.pub/.wg.key). - Self-Signed X.509 TLS/SSL Certificates: Custom Common Names (CN), Subject Alternative Names (SANs), RSA / ECDSA / Ed25519 keys, and configurable validity periods (
.crt/.key). - RSA-4096 & GPG / OpenPGP / Age: High-security RSA, armored OpenPGP keypairs (
.asc), and modern Age encryption keys (.recipient.txt/.key). - Direct Vault Storage: 1-click button to save newly generated keys and certificates straight into your encrypted database keyring.
- Local PC File & Bundle Export: Save individual public keys / certs or private keys straight to your computer with automatic file extension matching, or export both simultaneously via
📦 Export Keypair Bundle to Folder.... - Local Key Installer & System Verifier: Select and install SSH, GPG, Age, WireGuard, and TLS keys directly onto your local Windows or Linux host:
- Automated Security Hardening: Enforces strict permissions (NTFS ACLs restricted to current user on Windows; POSIX
chmod 0600/0700on Linux/macOS) with overwrite safeguards. - Exhaustive System Audits: Verifies file existence, SHA-256 bit-for-bit integrity, and syntax via OpenSSH
ssh-keygen -l. - Agent & Host Integration: Automatically adds public keys to
~/.ssh/authorized_keys, creates~/.ssh/configHost blocks, and registers keys into runningssh-agentor native GPG keyrings (gpg --import). - Local Key Scanner & Exporter: Scan and discover existing keys across local directories (
~/.ssh,~/.gnupg, etc.) to import into the vault, or bulk-export vault keys with an OpenSSH client configuration template or compressed.ziparchive.
- Automated Security Hardening: Enforces strict permissions (NTFS ACLs restricted to current user on Windows; POSIX
- Ed25519 Keypairs: Modern 256-bit elliptic curve SSH keys with OpenSSH and PuTTY (
Updated 2026-10-31