A full-spectrum, browser-based cryptography laboratory covering modern, classical, and post-quantum systems.

This repo will house the source code for my Team's term wide game dev project for the CIS 410: Intro to Game Programming course at the University of Oregon.

Browser-based Shor's algorithm simulation — modular exponentiation period finding, QFT probability distribution, continued fractions, factor extraction. The reason RSA, ECC, and Diffie-Hellman need replacing. No backends. No simulated shortcuts — the number theory is real.

Browser-based J-UNIWARD JPEG steganography demo — Daubechies-8 wavelet cost, full STC (h=12, 4096-state Viterbi), PBKDF2+HKDF key schedule, adaptive payload embedding, live steganalysis comparison. No backends. No simulated math.

Browser-based demo of Shamir's Secret Sharing — split a secret into n shares, reconstruct from any k. Polynomial curve visualization, information-theoretic security proof, and AES key protection. Invented by Adi Shamir (Weizmann Institute, Israel) in 1979.

Browser-based AES-GCM vs AES-GCM-SIV comparison — live nonce reuse attack showing keystream XOR recovery and GHASH key extraction, synthetic IV construction visualizer, and side-by-side misuse-resistance comparison. RFC 8452. Part of crypto-lab.

Browser-based demo of the Double Ratchet Algorithm — the cryptographic protocol powering Signal, WhatsApp, and Google Messages. Live conversation with forward secrecy, break-in recovery, and key compromise simulation.

Browser-based Merkle tree and inclusion proof demo — build trees up to 16 leaves with real SHA-256, generate O(log n) membership proofs, tamper any leaf and watch the root change, with Git, Bitcoin, and Certificate Transparency walkthroughs. Part of crypto-lab.

Browser-based BB84 Quantum Key Distribution simulation — photon polarization, basis sifting, QBER eavesdropper detection, privacy amplification, AES-256-GCM. Physics-based security. The only key exchange in the suite a quantum computer cannot break. No backends. No simulated math — only simulated physics.

Browser demo for ML-KEM (CRYSTALS-Kyber), the post-quantum key encapsulation mechanism standardized as NIST FIPS 203 in August 2024.

A zero-dependency browser playground for rain synthesis and lightweight deraining previews.

Browser-based demo of ML-DSA (CRYSTALS-Dilithium), the lattice-based post-quantum digital signature scheme standardized as NIST FIPS 204 in August 2024. Sign, verify, and seal documents — quantum-resistant.

Browser-based Grover's algorithm simulation — amplitude amplification, oracle phase kickback, inversion-about-mean diffusion, probability oscillation. AES-128 weakened to 2^64. AES-256 survives at 2^128. The fix is doubling key length. No backends. No simulated shortcuts.

Browser-based 2-server XOR Private Information Retrieval (Chor et al. 1995) — a patron retrieves any book from a 16-item catalog without the server learning which one was requested. Real IT-PIR arithmetic, step-by-step query walkthrough, and privacy audit panel. Part of crypto-lab.

Browser-based ChaCha20 stream cipher — quarter-round stepper, keystream visualizer, nonce reuse attack demo, and encrypt/decrypt playground. ARX design, no AES-NI required. Part of crypto-lab.

Browser-based LLL and BKZ lattice reduction demo — Gram-Schmidt orthogonalization, Lovász condition, step-by-step basis reduction animation, toy LWE primal attack, parameter explorer showing why Kyber's n=256 q=3329 survives while toy parameters fail instantly. The hardness assumption, made tangible. No backends. No simulated math.

Browser-based HiAE threat model case study — AESL, Theorem 1 candidate enumeration, MITM state recovery, byte decomposition, guess-and-determine key recovery. Security claims are contracts. The threat model is the fine print. No backends. No simulated math.

Browser-based demo of hybrid post-quantum key exchange — X25519 + ML-KEM-768 running in parallel, exactly as deployed in Chrome 124+, Cloudflare, and Signal. Secure against both classical and quantum attackers.

Browser-based Poly1305 MAC demo — polynomial evaluation over GF(2¹³⁰−5), constant-time tag verification, key-reuse attack visualizer, and Polynomial Stepper. Part of crypto-lab.

Browser-based SHA-256 vs SHA3-256 vs BLAKE3 internals — live avalanche analysis, Merkle-Damgård/sponge/tree construction diagrams, and timing benchmarks. Part of crypto-lab.