Security & crypto reference tools
A small set of fast, free tools for people who work with security and cryptography. Everything runs in your browser, there are no accounts, and nothing you type is stored. Built and maintained by a working security researcher.
Post-quantum size comparator
Public key, ciphertext and signature sizes for ML-KEM, ML-DSA, SLH-DSA and Falcon, compared to RSA and elliptic curve. From FIPS 203/204/205.
crypto-sizes.tools →
CVE risk triage
Paste a CVE and see its CVSS severity, EPSS exploitation probability, and CISA KEV in-the-wild status on one screen, with a plain-language verdict.
cve-triage.tools →
Password crack-time estimator
See how long a password would stand up to guessing, and why the way it is stored (bcrypt vs a fast hash) changes the answer more than length does.
crack-time.tools →
More reference tools
- Crypto algorithm deprecation timeline — when SHA-1, RSA-2048, 3DES are deprecated/disallowed (NIST, CNSA 2.0)
- PQC migration lookup — required post-quantum algorithm + deadline by use case
- Password hashing parameter recommender — OWASP Argon2id/bcrypt/scrypt/PBKDF2 + calibrator
Why these tools exist
Most online calculators for these tasks are generic or out of date. These are written and kept current by someone who uses them day to day: the post-quantum sizes track the finalized NIST standards, the CVE tool pulls live data from NVD, FIRST and CISA, and the password estimator is honest about the difference between a random password and a real one.
Free to use
These tools are supported by advertising so they can stay free and require no sign-up. Each tool site has its own privacy policy describing how advertising cookies work and how to opt out.