hmac-drbg

🔐 go-krypto: A Go library collecting cryptographic algorithms designed in the Republic of Korea (SEED, ARIA, HIGHT, LEA, HAS160, LSH, KCDSA, EC-KCDSA)

A portable library implementing NIST SP 800-90A DRBGs

A cryptographically secure pseudorandom number generator cli tool printing in a wide variety of byte encodings (hex, base64,..) and for many programming languages (c, java, c#, php, etc.) using NIST SP800-90Ar1 HMAC-DRBG. Supports external seeding from various true random services.

Additional test vectors used to validate the Toolkit.

Pure Haskell HMAC-DRBG

Browser-based stateless password manager — derive any password from a master passphrase using HMAC-DRBG. Nothing stored, nothing synced, nothing to breach.

Browser-based entropy failure demo — NIST SP 800-90B. DRBG Arena teaches how the generator works; this asks where the seed came from. Snapshot a VM, restore two copies, watch both emit the same session key from an honest, uncompromised, correct DRBG. Fork inheritance, silent reseed failure, and the upstream cause of every nonce-reuse attack.

Browser-based demo of the Dual_EC_DRBG backdoor — the NSA-planted vulnerability confirmed by Snowden. The standard was compromised. Here's the proof.

Browser-based NIST SP 800-90A demo — HMAC_DRBG, CTR_DRBG, and Hash_DRBG with state visualizers, seeding, reseeding, and live NIST SP 800-22 statistical tests. The correct-case companion to Corrupted Oracle.