Online ECC Key Generation and ECDSA Signature Verification Tool

Online ECC Key Generation and ECDSA Signature Verification Tool

ECC (Elliptic Curve Cryptography) is a public key cryptography system based on elliptic curve mathematics. Compared with RSA, ECC provides similar security with shorter keys and lower transmission costs. This tool generates ECC key pairs locally and provides ECDSA signing and verification functions.

Core Features

• Generate ECC key pairs using selectable curves.
• Export public keys as PEM SPKI format and private keys as PKCS#8 format.
• Import existing PEM keys for signing and verification.
• Create ECDSA signatures and verify signature validity.
• Copy or download generated keys and signatures.

Supported Curves and Algorithms

The tool supports three common curves: P-256 (secp256r1), P-384 (secp384r1) and P-521 (secp521r1). They provide approximately 128-bit, 192-bit and 256-bit security levels. ECDSA signatures support SHA-256, SHA-384 and SHA-512 hash algorithms.

ECC Capability Notes

ECC itself is not a specific encryption algorithm. This tool implements ECDSA digital signatures only and does not encrypt long messages directly. For elliptic curve key agreement, use ECDH. Curves such as secp256k1 and Ed25519 are not included because they are not supported by standard browser WebCrypto APIs.

Error Handling

• Missing keys will prompt users to generate or import valid keys first.
• Invalid PEM formatted keys will display format errors.
• Empty messages or signatures will request required input.
• Failed verification clearly returns an invalid signature result.

Environment Requirements

Key generation, signing and verification depend on the browser WebCrypto API. The API requires a secure HTTPS environment. Generation progress is displayed during processing.

Usage Scenarios

• Generating ECC test keys for API signature development.
• Testing EC keys used by JWT ES256, ES384 and ES512.
• Troubleshooting signature verification failures.
• Comparing ECC and RSA key sizes and performance.

Privacy and Security

Keys are generated locally in the browser. Private keys and signing messages are not uploaded or stored. Generated keys should only be used for testing and learning, not production key management.