Hsmkit

hsm-kit4stars

Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

1# Hsmkit

README.mdMCP server

Transport: stdio
Status: Local

Power your agent

Add this server

Install from the publisher. Not a PlugMCP endpoint.

Run on PlugMCP

Host a copy with our keys and logs.

No packaged release in the registry yet. Follow the repository README.

RepositoryPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
License: MIT
Last checked: 2026-10-28

Stars: 4
Tools: —
Uptime: —

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

How do I install Hsmkit?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Hsmkit need an API key?

No required environment variable is listed on this record.

What transport does Hsmkit use?

Hsmkit runs locally over stdio.

When was Hsmkit last checked?

Last checked 2026-10-28. Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

From the publisher

Documentation

HSM Kit - Professional Online Encryption Toolkit

🔐 Professional encryption & key management tools, 100% client-side, secure & reliable

📖 Introduction

HSM Kit is a professional online encryption toolkit designed for developers, testers, and security engineers in finance, payment, and security domains. It provides 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms, all running entirely in the browser.

Core Values

Security First - 100% client-side computation, keys and sensitive data never leave your device
Professional & Complete - 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms
Ready to Use - Open browser and start working, supports PWA installation, works on Mac/Windows/Linux/mobile
Open Source - Code is publicly auditable, meets financial industry compliance requirements

✨ Features

Feature	Description
🔒 Local Computation	All crypto operations run in browser, data never uploaded
📱 PWA Support	Installable to desktop, works like native app, offline available
🌐 Cross Platform	Mac/Windows/Linux/iOS/Android supported
🌍 Multi-language	English, Chinese, Japanese, Korean, German, French - 100% coverage
🌙 Dark Mode	Day/night theme switching to protect your eyes
♿ Accessible	ARIA labels, keyboard navigation, skip-to-content, aria-live regions, WCAG 2.1 AA compliant
⚡ Lazy Loading	Route-level code splitting, only loads current page
🔍 SEO Optimized	Pre-rendered static HTML, Schema markup, multi-language hreflang
📚 Knowledge Base	43 English + 43 Chinese technical articles with static, indexable delivery
🇨🇳 Localized Tool URLs	8 high-demand tools have canonical Chinese URLs with reciprocal hreflang
🧪 Published Test Vectors	Downloadable AES JSON vectors verified by CryptoJS and Web Crypto regression tests
📝 Context-safe Examples	One-click examples preserve the selected mode, format, tab, and enabling toggles
✅ Consistent Input Validation	Shared gray/green/red length and format states across all tool inputs
⭐ Favorites & Recent Tools	Local favorites plus 90-day recent-tool history, with no account required
🔗 Workflow Discovery	Each tool links to the next relevant tools and its supporting guides
📊 Privacy-safe Events	Optional GA/Zaraz events contain action/tool IDs only, never form values or results
🧪 Test Coverage	100+ Vitest tests plus production page smoke checks for all 44 tools

🛠️ Tool Modules

🔐 Encryption/Decryption Tools (5)

Tool	Description	Route
AES Encryption	AES-128/192/256, ECB/CBC/CFB/OFB/CTR modes	`/aes-encryption`
DES/3DES Encryption	DES/Triple DES, multiple padding options	`/des-encryption`
RSA Encryption	RSA encrypt/decrypt/sign/verify, PKCS#1/OAEP	`/rsa-encryption`
ECC/ECDSA	Elliptic curve, secp256k1/P-256/P-384	`/ecc-encryption`
FPE Format-Preserving	FF1/FF3-1 algorithms, NIST SP 800-38G	`/fpe-encryption`

🔑 Key Management Tools (8)

Tool	Description	Route
Key Generator	AES/DES/3DES secure random keys, key combining, parity	`/keys-dea`
Keyshare Generator	Key splitting for secure custody, KCV calculation	`/keyshare-generator`
Futurex Keys	Futurex HSM key encrypt/decrypt/lookup	`/futurex-keys`
Atalla Keys (AKB)	Atalla AKB format key encrypt/decrypt	`/atalla-keys`
SafeNet Keys	SafeNet HSM key encrypt/decrypt/lookup	`/safenet-keys`
Thales Keys	Thales HSM LMK key encrypt/decrypt/lookup	`/thales-keys`
Thales Key Block	Thales proprietary key block encode/decode	`/thales-key-block`
TR-31 Key Block	ANSI X9.143 key block encode/decode	`/tr31-key-block`

🔐 PKI Tools (2)

Tool	Description	Route
ASN.1 Decoder	DER/BER structure decoding, X.509 certificate parsing	`/asn1-parser`
SSL Certificates (X509)	SSL/TLS certificate parsing & validation	`/ssl-certificates`

💳 Payment Security Tools (21)

Category	Tool	Route
AS2805	AS2805 Message Tool	`/payments-as2805`
Bitmap	ISO 8583 Bitmap	`/payments-bitmap`
Card Validation	CVV/CVC	`/payments-card-validation-cvvs`
Card Validation	AMEX CSC	`/payments-card-validation-amex-cscs`
Card Validation	MasterCard CVC3	`/payments-card-validation-mastercard-cvc3`
DUKPT	DUKPT TDES (ISO 9797)	`/payments-dukpt-iso9797`
DUKPT	DUKPT AES	`/payments-dukpt-aes`
MAC	ISO 9797-1 MAC	`/payments-mac-iso9797-1`
MAC	ANSI X9.9/X9.19	`/payments-mac-ansix9`
MAC	AS2805 MAC	`/payments-mac-as2805`
MAC	TDES CBC-MAC	`/payments-mac-tdes-cbc-mac`
MAC	HMAC	`/payments-mac-hmac`
MAC	CMAC	`/payments-mac-cmac`
MAC	Retail MAC	`/payments-mac-retail`
PIN	PIN Block General	`/payments-pin-blocks-general`
PIN	PIN Block AES	`/payments-pin-blocks-aes`
PIN	PIN Offset	`/payments-pin-offset`
PIN	PIN PVV	`/payments-pin-pvv`
Other	VISA Certificates	`/payments-visa-certificates`
Other	ZKA (German Banking)	`/payments-zka`

🧰 General Tools (9)

Tool	Description	Route
Hash Calculator	MD5/SHA/SHA-3/BLAKE2/SM3 20+ algorithms	`/hashes`
Character Encoding	ASCII/Hex/Binary/EBCDIC/ATM conversion	`/character-encoding`
BCD Encoding	Decimal to BCD encoding conversion	`/bcd`
Check Digits	Luhn (MOD 10) / Amex SE (MOD 9)	`/check-digits`
Base64 Encode/Decode	Standard Base64 encoding/decoding	`/base64`
Base94 Encode/Decode	Base94 encoding/decoding	`/base94`
Message Parser	ISO 8583, ATM NDC/Wincor parsing	`/message-parser`
RSA DER Public Key	RSA public key DER/PEM encode/decode	`/rsa-der-public-key`
UUID Generator	UUID v1/v3/v4/v5 generation	`/uuid`

📚 Knowledge Base

HSM Kit includes a built-in knowledge base (/guides/) with 42 in-depth technical articles in each of English and Chinese, covering encryption algorithms, payment security, HSM key management, and more. Articles are cross-linked and directly connected to corresponding tools.

Knowledge Base Features

📝 Markdown Rendering - Code blocks, tables, internal links
🔗 Tool Integration - Direct links to related tools and articles
🌍 Bilingual - English and Chinese, 43 articles each, fully translated
📖 Table of Contents - Right-side TOC navigation with scroll highlighting
🔍 Search - Full-text search across articles

📁 Project Structure

hsmkit/
├── public/                     # Static assets
│   ├── favicon.svg             # Website logo
│   ├── favicon-*.png           # PWA icons (48/192/512)
│   ├── apple-touch-icon.png    # iOS icon
│   ├── sitemap.xml             # Sitemap (144 URLs with hreflang)
│   ├── robots.txt              # Crawler instructions
│   ├── _headers                # HTTP headers (Cloudflare)
│   └── _redirects              # SPA route redirects
│
├── scripts/                    # Build scripts
│   ├── generate-favicon-png.js # Favicon generation
│   ├── generate-guide-og.js    # Per-guide social image generation
│   ├── prerender-guides.js     # Static guide-page generation
│   ├── check-tool-pages.js     # Production page smoke checks
│   └── update-sitemap-lastmod.js # Guide/tool sitemap maintenance
│
├── src/
│   ├── components/             # Reusable components
│   │   ├── cipher/             # Encryption tool components
│   │   ├── common/             # Common components
│   │   │   ├── PageLayout.tsx  # Page layout + Schema.org
│   │   │   ├── ToolPage.tsx    # Tool page factory
│   │   │   ├── SEO.tsx         # SEO meta tags + prerender
│   │   │   ├── ResultCard.tsx  # Result display (aria-live)
│   │   │   ├── ErrorCard.tsx   # Error display (role="alert")
│   │   │   ├── LengthIndicator.tsx # Shared input length/format states
│   │   │   ├── ExampleButton.tsx # Context-preserving example loading
│   │   │   ├── ErrorBoundary.tsx # Error boundary
│   │   │   ├── ReloadPrompt.tsx # PWA update prompt (dark mode)
│   │   │   └── ...
│   │   ├── generic/            # General tool components
│   │   ├── keys/               # Key management components
│   │   ├── payment/            # Payment tool components
│   │   └── pki/                # PKI tool components
│   │
│   ├── hooks/                  # Custom hooks
│   │   ├── useLanguage.tsx     # Multi-language switching
│   │   ├── useTheme.tsx        # Theme switching
│   │   ├── useToolForm.ts      # Tool form hook
│   │   ├── useRecentTools.ts   # Recent tools and local favorites
│   │   └── ...
│   │
│   ├── data/                   # Tool metadata and examples
│   │   ├── examples.ts         # Non-production example values
│   │   ├── toolRelations.ts    # Related-tool workflow graph
│   │   └── toolGuidesMap.ts    # Tool-to-guide links
│   │
│   ├── locales/                # Translations (6 languages)
│   │   ├── en/                 # English
│   │   ├── zh/                 # Chinese
│   │   ├── ja/                 # Japanese
│   │   ├── ko/                 # Korean
│   │   ├── de/                 # German
│   │   └── fr/                 # French
│   │
│   ├── utils/                  # Utility functions
│   │   ├── analytics.ts        # Privacy-safe tool action events
│   │   ├── crypto.ts           # Core crypto utilities
│   │   ├── crypto.test.ts      # Crypto unit tests
│   │   ├── hex.ts              # Hex utilities
│   │   ├── hex.test.ts         # Hex unit tests
│   │   ├── logger.ts           # Production-safe logger
│   │   └── ...
│   │
│   ├── App.tsx                 # Root component + routes
│   ├── routeConfig.ts          # Route configuration
│   ├── routes.tsx              # Lazy-loaded page components
│   └── main.tsx                # Entry point
│
├── vitest.config.ts            # Test configuration
├── vite.config.ts              # Build configuration
├── tsconfig.json               # TypeScript config (strict mode)
└── package.json                # Dependencies

🚀 Quick Start

Online

Visit https://hsmkit.com to use all tools directly.

PWA Install

After visiting the website, your browser will prompt "Install HSM Kit". Click to install to desktop.

Local Development

# Clone repository
git clone https://github.com/hsm-kit/hsmkit.git
cd hsmkit

# Install dependencies
npm install

# Start development server
npm run dev
# Visit http://localhost:5173

Build for Production

# Build (includes sitemap update + Puppeteer prerender + PWA Service Worker)
npm run build

# Preview production build
npm run preview

When a release changes tool-page functionality, refresh only the 44 tool-page dates without rewriting homepage, legal, or guide dates:

node scripts/update-sitemap-lastmod.js --tools-date YYYY-MM-DD

Note: Chrome is required for building. The prebuild script automatically installs it via npx puppeteer browsers install chrome.

Type Checking

# TypeScript type checking (strict mode)
npm run typecheck

# ESLint code checking
npm run lint

# ESLint auto-fix
npm run lint:fix

Testing

# Run all tests
npm test

# Smoke-test every generated tool and guide page
npm run test:pages

# Watch mode
npm run test:watch

# Test coverage
npm run test:coverage

🏗️ Tech Stack

Technology	Version	Purpose
React	19	Frontend framework
TypeScript	5.9	Type safety (strict mode)
Vite (Rolldown)	7.2	Build tool
Ant Design	6	UI component library
React Router	7	Routing
CryptoJS	4.2	Symmetric encryption (AES/DES/3DES)
node-forge	1.3	RSA/ASN.1/X.509
elliptic	6.6	ECC/ECDSA
hash-wasm	4.12	High-performance hashing (WASM)
react-markdown	10.x	Markdown rendering
vite-plugin-pwa	1.3	PWA support (Service Worker)
Vitest	4.x	Unit testing framework
@testing-library/react	16.x	React component testing

⚡ Performance

Optimization	Description
Route Lazy Loading	All pages use `React.lazy()` for on-demand loading
Vendor Splitting	React / Ant Design / Crypto packaged separately for caching
Pre-rendering SSG	Puppeteer generates static HTML at build time
Hydration Reuse	Uses `hydrateRoot` when pre-rendered HTML exists
PWA Caching	Service Worker pre-caches 210+ resources for offline use
Long-term Caching	Static assets `max-age=31536000, immutable`

🔐 Security

Client-side Encryption - All crypto operations run in browser using Web Crypto API and crypto-js
Zero Data Transfer - Keys and sensitive data never leave your device
Open Source - All code is publicly auditable
Compliance Ready - Meets financial industry security requirements
CSP Protection - Content-Security-Policy prevents XSS attacks
Production Logging - Debug logs silenced in production, only errors recorded

♿ Accessibility

HSM Kit follows WCAG 2.1 AA standards with comprehensive accessibility support:

Skip-to-content Link - Keyboard users can quickly jump to main content
ARIA Labels - Navigation, buttons, form elements have proper aria-labels
aria-live Regions - Dynamic results and errors are announced by screen readers
Keyboard Navigation - All interactive elements support Tab/Enter/Space
Focus Management - Clear focus indicators and logical focus order
Semantic HTML - Uses role="banner", role="main", role="alert" etc.

🌍 Internationalization

HSM Kit supports 6 languages with 100% translation coverage:

Language	Code	Status
English	en	✅ 100%
简体中文	zh	✅ 100%
日本語	ja	✅ 100%
한국어	ko	✅ 100%
Deutsch	de	✅ 100%
Français	fr	✅ 100%

Translation files are located in src/locales/ with lazy loading for optimal performance.

🌍 Deployment

HSM Kit can be deployed to any static hosting service:

Platform	Config File
Cloudflare Pages	`wrangler.json`, `public/_headers`, `public/_redirects`
Vercel	`vercel.json`
Netlify	`public/_redirects`

# The dist/ directory can be deployed directly after build
npm run build

Search Discovery

Set BING_SITE_AUTH in the build environment to the verification value supplied by Bing Webmaster Tools.
After Cloudflare Pages finishes deploying, open GitHub Actions → Submit URLs to IndexNow → Run workflow. Leave the URL empty to submit the sitemap, or enter one changed URL. Local submission remains available through npm run submit:indexnow.
AI-readable resources are published at /llms.txt, /ai/tools.json, and each guide's index.md URL.

🤝 Contributing

Welcome to submit Issues and Pull Requests!

Fork this repository
Create a feature branch (git checkout -b feature/AmazingFeature)
Commit your changes (git commit -m 'Add some AmazingFeature')
Push to the branch (git push origin feature/AmazingFeature)
Submit a Pull Request

Adding New Knowledge Base Articles

Create {slug}.md in src/content/guides/en/ (and zh/ for Chinese)
Update src/data/guides/en.json and zh.json with metadata
Add routes in prerender.config.ts
Add URL in public/sitemap.xml
Run npm run build to verify

📄 License

MIT License - See LICENSE file

🔗 Links

⚠️ Note: This tool is intended for testing and development environments. Please ensure compliance with relevant security standards before using in production.

Made with ❤️ by HSM Kit Team

Hsmkit

hsm-kit4stars

Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

Finance Cloud Infrastructure

Install Run on PlugMCP

GitHub Website

Run on PlugMCP

1# Hsmkit

README.mdMCP server

Transport: stdio
Status: Local

Power your agent

Add this server

Install from the publisher. Not a PlugMCP endpoint.

Run on PlugMCP

Host a copy with our keys and logs.

No packaged release in the registry yet. Follow the repository README.

RepositoryPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
License: MIT
Last checked: 2026-10-28

Stars: 4
Tools: —
Uptime: —

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

How do I install Hsmkit?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Hsmkit need an API key?

No required environment variable is listed on this record.

What transport does Hsmkit use?

Hsmkit runs locally over stdio.

When was Hsmkit last checked?

Last checked 2026-10-28. Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

From the publisher

Documentation

HSM Kit - Professional Online Encryption Toolkit

🔐 Professional encryption & key management tools, 100% client-side, secure & reliable

📖 Introduction

Core Values

Security First - 100% client-side computation, keys and sensitive data never leave your device
Professional & Complete - 44+ tools covering HSM key management, payment security, PKI certificates, and cryptographic algorithms
Ready to Use - Open browser and start working, supports PWA installation, works on Mac/Windows/Linux/mobile
Open Source - Code is publicly auditable, meets financial industry compliance requirements

✨ Features

Feature	Description
🔒 Local Computation	All crypto operations run in browser, data never uploaded
📱 PWA Support	Installable to desktop, works like native app, offline available
🌐 Cross Platform	Mac/Windows/Linux/iOS/Android supported
🌍 Multi-language	English, Chinese, Japanese, Korean, German, French - 100% coverage
🌙 Dark Mode	Day/night theme switching to protect your eyes
♿ Accessible	ARIA labels, keyboard navigation, skip-to-content, aria-live regions, WCAG 2.1 AA compliant
⚡ Lazy Loading	Route-level code splitting, only loads current page
🔍 SEO Optimized	Pre-rendered static HTML, Schema markup, multi-language hreflang
📚 Knowledge Base	43 English + 43 Chinese technical articles with static, indexable delivery
🇨🇳 Localized Tool URLs	8 high-demand tools have canonical Chinese URLs with reciprocal hreflang
🧪 Published Test Vectors	Downloadable AES JSON vectors verified by CryptoJS and Web Crypto regression tests
📝 Context-safe Examples	One-click examples preserve the selected mode, format, tab, and enabling toggles
✅ Consistent Input Validation	Shared gray/green/red length and format states across all tool inputs
⭐ Favorites & Recent Tools	Local favorites plus 90-day recent-tool history, with no account required
🔗 Workflow Discovery	Each tool links to the next relevant tools and its supporting guides
📊 Privacy-safe Events	Optional GA/Zaraz events contain action/tool IDs only, never form values or results
🧪 Test Coverage	100+ Vitest tests plus production page smoke checks for all 44 tools

🛠️ Tool Modules

🔐 Encryption/Decryption Tools (5)

Tool	Description	Route
AES Encryption	AES-128/192/256, ECB/CBC/CFB/OFB/CTR modes	`/aes-encryption`
DES/3DES Encryption	DES/Triple DES, multiple padding options	`/des-encryption`
RSA Encryption	RSA encrypt/decrypt/sign/verify, PKCS#1/OAEP	`/rsa-encryption`
ECC/ECDSA	Elliptic curve, secp256k1/P-256/P-384	`/ecc-encryption`
FPE Format-Preserving	FF1/FF3-1 algorithms, NIST SP 800-38G	`/fpe-encryption`

🔑 Key Management Tools (8)

Tool	Description	Route
Key Generator	AES/DES/3DES secure random keys, key combining, parity	`/keys-dea`
Keyshare Generator	Key splitting for secure custody, KCV calculation	`/keyshare-generator`
Futurex Keys	Futurex HSM key encrypt/decrypt/lookup	`/futurex-keys`
Atalla Keys (AKB)	Atalla AKB format key encrypt/decrypt	`/atalla-keys`
SafeNet Keys	SafeNet HSM key encrypt/decrypt/lookup	`/safenet-keys`
Thales Keys	Thales HSM LMK key encrypt/decrypt/lookup	`/thales-keys`
Thales Key Block	Thales proprietary key block encode/decode	`/thales-key-block`
TR-31 Key Block	ANSI X9.143 key block encode/decode	`/tr31-key-block`

🔐 PKI Tools (2)

Tool	Description	Route
ASN.1 Decoder	DER/BER structure decoding, X.509 certificate parsing	`/asn1-parser`
SSL Certificates (X509)	SSL/TLS certificate parsing & validation	`/ssl-certificates`

💳 Payment Security Tools (21)

Category	Tool	Route
AS2805	AS2805 Message Tool	`/payments-as2805`
Bitmap	ISO 8583 Bitmap	`/payments-bitmap`
Card Validation	CVV/CVC	`/payments-card-validation-cvvs`
Card Validation	AMEX CSC	`/payments-card-validation-amex-cscs`
Card Validation	MasterCard CVC3	`/payments-card-validation-mastercard-cvc3`
DUKPT	DUKPT TDES (ISO 9797)	`/payments-dukpt-iso9797`
DUKPT	DUKPT AES	`/payments-dukpt-aes`
MAC	ISO 9797-1 MAC	`/payments-mac-iso9797-1`
MAC	ANSI X9.9/X9.19	`/payments-mac-ansix9`
MAC	AS2805 MAC	`/payments-mac-as2805`
MAC	TDES CBC-MAC	`/payments-mac-tdes-cbc-mac`
MAC	HMAC	`/payments-mac-hmac`
MAC	CMAC	`/payments-mac-cmac`
MAC	Retail MAC	`/payments-mac-retail`
PIN	PIN Block General	`/payments-pin-blocks-general`
PIN	PIN Block AES	`/payments-pin-blocks-aes`
PIN	PIN Offset	`/payments-pin-offset`
PIN	PIN PVV	`/payments-pin-pvv`
Other	VISA Certificates	`/payments-visa-certificates`
Other	ZKA (German Banking)	`/payments-zka`

🧰 General Tools (9)

Tool	Description	Route
Hash Calculator	MD5/SHA/SHA-3/BLAKE2/SM3 20+ algorithms	`/hashes`
Character Encoding	ASCII/Hex/Binary/EBCDIC/ATM conversion	`/character-encoding`
BCD Encoding	Decimal to BCD encoding conversion	`/bcd`
Check Digits	Luhn (MOD 10) / Amex SE (MOD 9)	`/check-digits`
Base64 Encode/Decode	Standard Base64 encoding/decoding	`/base64`
Base94 Encode/Decode	Base94 encoding/decoding	`/base94`
Message Parser	ISO 8583, ATM NDC/Wincor parsing	`/message-parser`
RSA DER Public Key	RSA public key DER/PEM encode/decode	`/rsa-der-public-key`
UUID Generator	UUID v1/v3/v4/v5 generation	`/uuid`

📚 Knowledge Base

Knowledge Base Features

📝 Markdown Rendering - Code blocks, tables, internal links
🔗 Tool Integration - Direct links to related tools and articles
🌍 Bilingual - English and Chinese, 43 articles each, fully translated
📖 Table of Contents - Right-side TOC navigation with scroll highlighting
🔍 Search - Full-text search across articles

📁 Project Structure

hsmkit/
├── public/                     # Static assets
│   ├── favicon.svg             # Website logo
│   ├── favicon-*.png           # PWA icons (48/192/512)
│   ├── apple-touch-icon.png    # iOS icon
│   ├── sitemap.xml             # Sitemap (144 URLs with hreflang)
│   ├── robots.txt              # Crawler instructions
│   ├── _headers                # HTTP headers (Cloudflare)
│   └── _redirects              # SPA route redirects
│
├── scripts/                    # Build scripts
│   ├── generate-favicon-png.js # Favicon generation
│   ├── generate-guide-og.js    # Per-guide social image generation
│   ├── prerender-guides.js     # Static guide-page generation
│   ├── check-tool-pages.js     # Production page smoke checks
│   └── update-sitemap-lastmod.js # Guide/tool sitemap maintenance
│
├── src/
│   ├── components/             # Reusable components
│   │   ├── cipher/             # Encryption tool components
│   │   ├── common/             # Common components
│   │   │   ├── PageLayout.tsx  # Page layout + Schema.org
│   │   │   ├── ToolPage.tsx    # Tool page factory
│   │   │   ├── SEO.tsx         # SEO meta tags + prerender
│   │   │   ├── ResultCard.tsx  # Result display (aria-live)
│   │   │   ├── ErrorCard.tsx   # Error display (role="alert")
│   │   │   ├── LengthIndicator.tsx # Shared input length/format states
│   │   │   ├── ExampleButton.tsx # Context-preserving example loading
│   │   │   ├── ErrorBoundary.tsx # Error boundary
│   │   │   ├── ReloadPrompt.tsx # PWA update prompt (dark mode)
│   │   │   └── ...
│   │   ├── generic/            # General tool components
│   │   ├── keys/               # Key management components
│   │   ├── payment/            # Payment tool components
│   │   └── pki/                # PKI tool components
│   │
│   ├── hooks/                  # Custom hooks
│   │   ├── useLanguage.tsx     # Multi-language switching
│   │   ├── useTheme.tsx        # Theme switching
│   │   ├── useToolForm.ts      # Tool form hook
│   │   ├── useRecentTools.ts   # Recent tools and local favorites
│   │   └── ...
│   │
│   ├── data/                   # Tool metadata and examples
│   │   ├── examples.ts         # Non-production example values
│   │   ├── toolRelations.ts    # Related-tool workflow graph
│   │   └── toolGuidesMap.ts    # Tool-to-guide links
│   │
│   ├── locales/                # Translations (6 languages)
│   │   ├── en/                 # English
│   │   ├── zh/                 # Chinese
│   │   ├── ja/                 # Japanese
│   │   ├── ko/                 # Korean
│   │   ├── de/                 # German
│   │   └── fr/                 # French
│   │
│   ├── utils/                  # Utility functions
│   │   ├── analytics.ts        # Privacy-safe tool action events
│   │   ├── crypto.ts           # Core crypto utilities
│   │   ├── crypto.test.ts      # Crypto unit tests
│   │   ├── hex.ts              # Hex utilities
│   │   ├── hex.test.ts         # Hex unit tests
│   │   ├── logger.ts           # Production-safe logger
│   │   └── ...
│   │
│   ├── App.tsx                 # Root component + routes
│   ├── routeConfig.ts          # Route configuration
│   ├── routes.tsx              # Lazy-loaded page components
│   └── main.tsx                # Entry point
│
├── vitest.config.ts            # Test configuration
├── vite.config.ts              # Build configuration
├── tsconfig.json               # TypeScript config (strict mode)
└── package.json                # Dependencies

🚀 Quick Start

Online

Visit https://hsmkit.com to use all tools directly.

PWA Install

After visiting the website, your browser will prompt "Install HSM Kit". Click to install to desktop.

Local Development

# Clone repository
git clone https://github.com/hsm-kit/hsmkit.git
cd hsmkit

# Install dependencies
npm install

# Start development server
npm run dev
# Visit http://localhost:5173

Build for Production

# Build (includes sitemap update + Puppeteer prerender + PWA Service Worker)
npm run build

# Preview production build
npm run preview

When a release changes tool-page functionality, refresh only the 44 tool-page dates without rewriting homepage, legal, or guide dates:

node scripts/update-sitemap-lastmod.js --tools-date YYYY-MM-DD

Note: Chrome is required for building. The prebuild script automatically installs it via npx puppeteer browsers install chrome.

Type Checking

# TypeScript type checking (strict mode)
npm run typecheck

# ESLint code checking
npm run lint

# ESLint auto-fix
npm run lint:fix

Testing

# Run all tests
npm test

# Smoke-test every generated tool and guide page
npm run test:pages

# Watch mode
npm run test:watch

# Test coverage
npm run test:coverage

🏗️ Tech Stack

Technology	Version	Purpose
React	19	Frontend framework
TypeScript	5.9	Type safety (strict mode)
Vite (Rolldown)	7.2	Build tool
Ant Design	6	UI component library
React Router	7	Routing
CryptoJS	4.2	Symmetric encryption (AES/DES/3DES)
node-forge	1.3	RSA/ASN.1/X.509
elliptic	6.6	ECC/ECDSA
hash-wasm	4.12	High-performance hashing (WASM)
react-markdown	10.x	Markdown rendering
vite-plugin-pwa	1.3	PWA support (Service Worker)
Vitest	4.x	Unit testing framework
@testing-library/react	16.x	React component testing

⚡ Performance

Optimization	Description
Route Lazy Loading	All pages use `React.lazy()` for on-demand loading
Vendor Splitting	React / Ant Design / Crypto packaged separately for caching
Pre-rendering SSG	Puppeteer generates static HTML at build time
Hydration Reuse	Uses `hydrateRoot` when pre-rendered HTML exists
PWA Caching	Service Worker pre-caches 210+ resources for offline use
Long-term Caching	Static assets `max-age=31536000, immutable`

🔐 Security

Client-side Encryption - All crypto operations run in browser using Web Crypto API and crypto-js
Zero Data Transfer - Keys and sensitive data never leave your device
Open Source - All code is publicly auditable
Compliance Ready - Meets financial industry security requirements
CSP Protection - Content-Security-Policy prevents XSS attacks
Production Logging - Debug logs silenced in production, only errors recorded

♿ Accessibility

HSM Kit follows WCAG 2.1 AA standards with comprehensive accessibility support:

Skip-to-content Link - Keyboard users can quickly jump to main content
ARIA Labels - Navigation, buttons, form elements have proper aria-labels
aria-live Regions - Dynamic results and errors are announced by screen readers
Keyboard Navigation - All interactive elements support Tab/Enter/Space
Focus Management - Clear focus indicators and logical focus order
Semantic HTML - Uses role="banner", role="main", role="alert" etc.

🌍 Internationalization

HSM Kit supports 6 languages with 100% translation coverage:

Language	Code	Status
English	en	✅ 100%
简体中文	zh	✅ 100%
日本語	ja	✅ 100%
한국어	ko	✅ 100%
Deutsch	de	✅ 100%
Français	fr	✅ 100%

Translation files are located in src/locales/ with lazy loading for optimal performance.

🌍 Deployment

HSM Kit can be deployed to any static hosting service:

Platform	Config File
Cloudflare Pages	`wrangler.json`, `public/_headers`, `public/_redirects`
Vercel	`vercel.json`
Netlify	`public/_redirects`

# The dist/ directory can be deployed directly after build
npm run build

Search Discovery

Set BING_SITE_AUTH in the build environment to the verification value supplied by Bing Webmaster Tools.
After Cloudflare Pages finishes deploying, open GitHub Actions → Submit URLs to IndexNow → Run workflow. Leave the URL empty to submit the sitemap, or enter one changed URL. Local submission remains available through npm run submit:indexnow.
AI-readable resources are published at /llms.txt, /ai/tools.json, and each guide's index.md URL.

🤝 Contributing

Welcome to submit Issues and Pull Requests!

Fork this repository
Create a feature branch (git checkout -b feature/AmazingFeature)
Commit your changes (git commit -m 'Add some AmazingFeature')
Push to the branch (git push origin feature/AmazingFeature)
Submit a Pull Request

Adding New Knowledge Base Articles

Create {slug}.md in src/content/guides/en/ (and zh/ for Chinese)
Update src/data/guides/en.json and zh.json with metadata
Add routes in prerender.config.ts
Add URL in public/sitemap.xml
Run npm run build to verify

📄 License

MIT License - See LICENSE file

🔗 Links

⚠️ Note: This tool is intended for testing and development environments. Please ensure compliance with relevant security standards before using in production.

Made with ❤️ by HSM Kit Team