RSA键密钥对生成器
按参数生成RSA键pair结果。
使用步骤
如何使用
- Choose a 2048-bit or 3072-bit RSA key size and an optional download label.
- Generate the pair locally with RSA-OAEP and SHA-256.
- Copy or download the PKCS#8 private key and SPKI public key, then store the private key securely.
Local browser generation
The Web Crypto API creates the key pair on your device. Exported PEM text stays in this page until you copy or download it; this tool does not send, store, rotate, or recover keys.
Clear security boundary
RSA-OAEP is for encryption and is intended for small plaintexts or wrapping a symmetric key. Do not use these outputs as TLS certificates, signing keys, identity credentials, or a production key-management service. Protect the private key and use a reviewed library and key-management process for production.
常见问题
你可能还想知道
What algorithm does this generator use?
It uses RSA-OAEP with SHA-256, a 2048-bit or 3072-bit modulus, and public exponent 65537.
Which key should I share?
The SPKI public key may be shared. Keep the PKCS#8 private key secret and protect it with your application’s secure storage.
Can RSA encrypt any message?
No. RSA-OAEP is designed for short messages and key wrapping. Use a modern hybrid encryption design for larger data.
Is this a production certificate or signing service?
No. It creates an encryption key pair only. It does not issue certificates, sign data, authenticate identities, or manage key rotation.