About sec-ref.tools

sec-ref.tools is the home page for a small set of free reference tools for security and cryptography engineers. Each tool answers a question that comes up constantly in day-to-day security work and rarely has a quick, trustworthy answer online:

• crypto-sizes.tools: how big are the post-quantum keys and signatures I am about to adopt?
• cve-triage.tools: how urgent is this CVE, going by CVSS, EPSS and the CISA KEV catalog together?
• crack-time.tools: how long would this password resist guessing, given how it is stored?

The tools run in the browser, need no account, and are kept current against the primary standards and data sources, which each one links.

Who makes it

sec-ref.tools is one of a small family of free security reference tools (the others are linked in the footer and collected at sec-ref.tools). They are built and maintained by a working security researcher who uses them day to day, because the generic calculators for these tasks are often out of date, cluttered, or wrong, and a good reference tool should not require an account.

Accuracy

Care is taken to keep the reference data correct, but these tools are provided for general information and estimation. For anything that matters, verify against the primary standard or data source, each of which is linked from the relevant tool. See the Terms for the full disclaimer.

Contact

Corrections, bug reports and suggestions are welcome. Email contact@sec-ref.tools, or see the contact page.