Release Crypto Tools 0.1.0

2026-09-01 02:44:39 +02:00
commit 4b75f819e2
57 changed files with 9159 additions and 0 deletions
@@ -0,0 +1,33 @@
+# Crypto Tools
+
+Inspect keys, certificates and signatures locally in the browser.
+
+Crypto Tools is a standalone local-first application in the [add·ideas Toolbox](https://git.add-ideas.de/lotobo/toolbox-portal). Inputs are processed in the browser and are not uploaded.
+
+## Version 0.1 scope
+
+- Bounded PEM and DER inspection for X.509 certificates, CSRs and CRLs
+- Identification and fingerprinting of public/private PEM key material without decryption
+- JWK/JWKS inspection, private-member warnings and RFC 7638 SHA-256 thumbprints
+- Explicit issuer-certificate signature links and DNS SAN hostname checks
+- A local JSON inspection report with an explicit non-trust model
+
+This is inspection, not complete RFC 5280 path validation, certificate trust, revocation checking, issuance, key generation or general signature verification. Inputs are bounded to 8 MiB and 256 PEM blocks. See [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) and [docs/PRIVACY-SECURITY.md](docs/PRIVACY-SECURITY.md).
+
+## Development
+
+Requires Node.js 22 and npm 11.
+
+```sh
+npm ci
+npm run check
+npm run test:browser
+```
+
+## Release
+
+`npm run release:artifact` creates a deterministic `release/crypto-tools-0.1.0.zip` and checksum sidecar.
+
+## Licence
+
+GPL-3.0-or-later. Runtime dependencies retain their own licences; see [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).