Generate RSA (2048–4096 bit) and Elliptic Curve (P-256, P-384, P-521) key pairs in PEM format using the browser's Web Crypto API. Private keys are generated locally and never transmitted.
Widely supported. Good for TLS, signing, encryption. Larger keys, slower generation.
Smaller keys, faster operations. Preferred for modern systems. NIST curves.
| Algorithm | Key / Curve | Security Level | Best For |
|---|---|---|---|
| RSA | 2048-bit | 112-bit | Legacy compatibility |
| RSA | 3072-bit | 128-bit | NIST minimum REC |
| RSA | 4096-bit | 140-bit | Long-term security |
| EC | P-256 | 128-bit | TLS, JWT (ES256) REC |
| EC | P-384 | 192-bit | High-security TLS |
| EC | P-521 | 260-bit | Maximum EC security |
EC keys are significantly smaller and faster than equivalent-security RSA keys. P-256 is recommended for most modern applications (TLS 1.3, JWT ES256). RSA 2048+ is needed for legacy systems.
AquilaX scans your repositories for exposed private keys, RSA secrets, EC keys, and cryptographic credentials committed to source code.