Hash
29SHA-1, SHA-2, SHA-3, SHAKE, BLAKE2, RIPEMD-160, SM3, MD5 and more.
CryptoPlayground
Build cryptography by drawing it. Drag hashes, ciphers, signatures and key exchanges onto a canvas, connect them, and watch every value update instantly.
Drag, connect, see
Every output, live
Each element is a real operation — a hash, a cipher, a signature, a key exchange. The output of one becomes the input of the next. Change a byte anywhere and everything downstream is recalculated at once.
- Real cryptographic results, not simulations
- Clear messages when an input is missing or a key is wrong
- Logic elements (equals, greater than, if / else) for verification flows
- Undo and redo, projects saved as files
Textbook diagrams
The drawing from the paper — from your graph
The Diagram view redraws your graph in the notation of cryptography papers and textbooks: E, H, KeyGen, ⊕ and ‖, keys from the top, IVs and salts from below. Arrange boxes and lines by hand, add notes, leave helper steps out, and export as PNG or SVG.
Real code
C++ and Python, written for you
The Code view turns the graph into a complete program — in C++, or in Python with
the cryptography package. Copy it into your project: it compiles, runs and produces the same results
as the app.
# ECDH: shared secret ecdh = load_private_key(alice_private).exchange( ec.ECDH(), load_public_key(bob_public)) # HKDF: AES key key = HKDF(algorithm=hashes.SHA256(), length=32, salt=None, info="chat v1".encode()).derive(ecdh) # AES Encrypt nonce = os.urandom(12) ctx = Cipher(algorithms.AES(key), modes.GCM(nonce)).encryptor() ciphertext = ctx.update(b"Meet me at noon") + ctx.finalize()
Learn as you go
Every element explained
Select an element and the Info panel tells you what it does, what each input means and why it is needed, which standards define it, and what to watch out for — like never reusing a GCM nonce.
121 elements
From SHA-256 to ML-KEM
Organized by technology, searchable, and dragged onto the canvas from the Elements panel.
Symmetric ciphers
14AES (GCM, CBC, CTR, …), ChaCha20-Poly1305, ARIA, Camellia, SM4, DES and legacy ciphers.
MAC
9HMAC, CMAC, GMAC, KMAC, Poly1305, SipHash, BLAKE2 MAC.
Key derivation
4HKDF, PBKDF2, scrypt and Argon2.
RSA
7Key pairs, PKCS #1 v1.5 and PSS signatures, OAEP encryption, RSA KEM.
Elliptic curves
18ECDSA, EdDSA (Ed25519, Ed448), ECDH, X25519 / X448, DHKEM, SM2.
Post-quantum
9ML-KEM (Kyber), ML-DSA (Dilithium) and SLH-DSA (SPHINCS+).
Diffie–Hellman
2Finite-field key pairs and key agreement.
Key tools
8Convert keys between formats, extract raw bytes, inspect details, PKCS #12 export and import.
Encoding
7Base64, hex, concatenate, XOR and slice.
Logic
8Equals, not equals, greater / less than, not, if / else.
Sources & display
6Text, hex, random bytes and your own private keys in; hex and text results out.
Standard formats
Keys the way other tools expect them
Paste a key from a test vector or a .pem file, convert between structures, and save any output to a file.
PEMDERPKCS #8SubjectPublicKeyInfoPKCS #1
SEC 1JWKPKCS #12 (.p12)Raw key bytes
Download
Get CryptoPlayground
On macOS, open the disk image and drag CryptoPlayground to your Applications folder. On Windows, run the installer. Or use it in your browser: it is the same app, and projects are saved as downloads.
macOS 14.4 or laterIntel and Apple Silicon, one app for both. Signed and notarized by Apple, opens without warnings
Windows 10 or 11, 64-bitNot code-signed yet: if Windows warns, choose More info, then Run anyway
Works offlineNo account, no network access, no data collected
Self-containedEverything included, nothing else to install