AES-256-GCM · RSA-2048 · CRYPTOGRAPHIC TOOLKIT
AES  Symmetric Encryption
Key derived via PBKDF2-SHA256 (480k iterations)
RSA  Key Pair Generator
RSA Encrypt / Decrypt
RSA-OAEP limited to ~190 bytes for 2048-bit keys
SIG  Digital Signatures (RSA-PSS)
Component 1  Device Digital Identity Registry

Generates asymmetric RSA-2048 or RSA-4096 identity keys bound to a unique Device ID, computing a SHA-256 public key fingerprint and issuing a signed Device Certificate.

Component 2  Device Bound Hybrid Cryptographic Engine

Provides GCM-mode encryption authenticated with target Device ID as Additional Authenticated Data (AAD) and gates decryption to matched device identities.

Component 3  Deterministic Block Hashing & Signing Engine

Creates sequential, hash-linked sensor readings signed with the device's private key using RSA-PSS padding, sorting JSON keys and omitting hash/signature fields.

SENSOR TELEMETRY LEDGER (chain.json)
To test the Forensic Audit Engine: edit the ledger JSON directly in the textarea above (e.g. alter a reading value), then click 'AUDIT LEDGER INTEGRITY' below.
Component 4  Forensic Audit & Validation Engine

Performs a linear audit of the telemetry ledger, verifying block hashes, chronological links, and RSA-PSS signatures to detect alteration.

SHA  Hash Generator
About Hashing

A cryptographic hash function maps arbitrary data to a fixed-size digest. It is one-way — you cannot reverse a hash to get the original data. Even a single-bit change in the input produces a completely different hash (avalanche effect). Hashes are used for password storage, file integrity verification, digital signatures, and blockchain.