@hsmkit/crypto-tools
Advanced tools
Auditable client-safe primitives for encoding, check digits, key components, and payment test data.
Small, auditable primitives shared by the open-source HSM Kit project. The package has no runtime dependencies and works in modern browsers and Node.js 20+.
npm install @hsmkit/crypto-tools
import {
decodeBase64,
encodeBase64,
generateIso0PinBlock,
luhnCalculateCheckDigit,
luhnValidate,
xorHex,
} from '@hsmkit/crypto-tools';
luhnCalculateCheckDigit('7992739871'); // "3"
luhnValidate('79927398713'); // true
xorHex('FF00FF00', '00FF00FF'); // "FFFFFFFF"
generateIso0PinBlock('1234', '4111111111111111'); // "041225EEEEEEEEEE"
encodeBase64('HSM Kit'); // "SFNNIEtpdA=="
decodeBase64('SFNNIEtpdA=='); // "HSM Kit"
Additional exports provide strict Hex and Base64 byte conversion. Invalid inputs throw CryptoToolsError with a stable code.
This package is intended for educational, interoperability, and synthetic test data. It does not provide key custody, production HSM access, secure memory, or certified cryptographic modules. Never pass production PINs, keys, credentials, or live payment data to development tools.
Documentation and browser tools: https://hsmkit.com/
Issues: https://github.com/hsm-kit/hsmkit/issues
FAQs
Auditable client-safe primitives for encoding, check digits, key components, and payment test data.
The npm package @hsmkit/crypto-tools receives a total of 7 weekly downloads. As such, @hsmkit/crypto-tools popularity was classified as not popular.
We found that @hsmkit/crypto-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.
Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.