# CipherHUB

> CipherHUB is a production-grade cryptography toolkit exposing 31 cryptographic operations via MCP (Model Context Protocol), REST API, and interactive Web UI. It covers classical algorithms (AES, RSA, ECC, SM2/3/4, ZUC), post-quantum cryptography (ML-KEM FIPS 203, ML-DSA FIPS 204, X25519+ML-KEM-768 Hybrid KEX), and has passed interoperability certification with AWS KMS (64/64) and Tencent Cloud KMS (39/39).

- MCP Endpoint: `https://tools.cipherhub.cloud/cipherhub/mcp` (Streamable HTTP, stateless JSON-RPC 2.0)
- Web UI: `https://tools.cipherhub.cloud/`
- Blog (research & tutorials): `https://cipherhub.cloud/`

## MCP Tools

- [hello](https://tools.cipherhub.cloud/cipherhub/mcp): Echo test — verify MCP channel connectivity
- [generate_random_data](https://tools.cipherhub.cloud/cipherhub/mcp): CSPRNG random bytes (1–128 bytes), output as hex/base64
- [hash_sum](https://tools.cipherhub.cloud/cipherhub/mcp): Hash digest — SHA-1/224/256/384/512, SM3, SHAKE128/256
- [hmac_sum](https://tools.cipherhub.cloud/cipherhub/mcp): HMAC computation with configurable hash algorithm
- [block_cipher](https://tools.cipherhub.cloud/cipherhub/mcp): Block cipher CBC mode — AES-128/256-CBC, SM4-CBC (encrypt/decrypt)
- [stream_cipher](https://tools.cipherhub.cloud/cipherhub/mcp): AEAD ciphers — AES-256-GCM, ChaCha20-Poly1305, SM4-GCM
- [data_padding](https://tools.cipherhub.cloud/cipherhub/mcp): PKCS#7 padding add/remove for block ciphers
- [zuc_cipher](https://tools.cipherhub.cloud/cipherhub/mcp): ZUC-128 stream cipher (3GPP standard)
- [generate_rsa](https://tools.cipherhub.cloud/cipherhub/mcp): RSA key pair generation (2048/3072/4096 bits)
- [rsa_encryption](https://tools.cipherhub.cloud/cipherhub/mcp): RSA encryption (PKCS1-v1.5 / OAEP with SHA-256/384/512)
- [rsa_decryption](https://tools.cipherhub.cloud/cipherhub/mcp): RSA decryption
- [rsa_sign](https://tools.cipherhub.cloud/cipherhub/mcp): RSA signature (PKCS1-v1.5 / PSS with SHA-256/384/512)
- [rsa_verify](https://tools.cipherhub.cloud/cipherhub/mcp): RSA signature verification
- [generate_ecc](https://tools.cipherhub.cloud/cipherhub/mcp): ECC key pair generation (secp256r1/384r1/521r1/256k1, Ed25519, X25519)
- [ecc_key_exchange](https://tools.cipherhub.cloud/cipherhub/mcp): ECDH key agreement + HKDF key derivation
- [ecc_key_sign](https://tools.cipherhub.cloud/cipherhub/mcp): ECDSA / EdDSA digital signature
- [ecc_key_verify](https://tools.cipherhub.cloud/cipherhub/mcp): ECDSA / EdDSA signature verification
- [generate_sm2](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 key pair generation (GM/T 0009, curve SM2P256V1)
- [sm2_encryption](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 asymmetric encryption (C1C3C2/C1C2C3, ASN.1/raw)
- [sm2_decryption](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 decryption
- [sm2_sign](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 digital signature (with configurable user ID)
- [sm2_verify](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 signature verification
- [sm2_private_key_structure_parse](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 private key PEM ASN.1 structure parser
- [sm2_public_key_to_hex](https://tools.cipherhub.cloud/cipherhub/mcp): SM2 public key PEM to raw hex conversion
- [ml_kem_keygen](https://tools.cipherhub.cloud/cipherhub/mcp): ML-KEM key generation (FIPS 203 — ML-KEM-512/768/1024)
- [ml_kem_encap](https://tools.cipherhub.cloud/cipherhub/mcp): ML-KEM key encapsulation
- [ml_kem_decap](https://tools.cipherhub.cloud/cipherhub/mcp): ML-KEM key decapsulation
- [hybrid_kex](https://tools.cipherhub.cloud/cipherhub/mcp): X25519 + ML-KEM-768 hybrid key exchange (full flow)
- [ml_dsa_keygen](https://tools.cipherhub.cloud/cipherhub/mcp): ML-DSA key generation (FIPS 204 — ML-DSA-44/65/87)
- [ml_dsa_sign](https://tools.cipherhub.cloud/cipherhub/mcp): ML-DSA digital signature
- [ml_dsa_verify](https://tools.cipherhub.cloud/cipherhub/mcp): ML-DSA signature verification

## Documentation

- [API Reference](https://tools.cipherhub.cloud/.well-known/openapi.yaml): OpenAPI 3.1 specification for all 31 cryptographic operations
- [MCP Server README](https://github.com/bowenerchen/BoardStudy/tree/CipherHUB/Python3/CipherHUB/mcp_server): Setup, configuration, and usage guide
- [AWS KMS Interop Report](https://cipherhub.cloud/posts/cipherhub-aws-kms-interop/): Full interoperability verification (64/64 passed)
- [Tencent Cloud KMS Interop Report](https://cipherhub.cloud/posts/cipherhub-tencent-kms-interop/): Full interoperability verification (39/39 passed)

## Blog (Research & Tutorials)

- [Cryptography](https://cipherhub.cloud/categories/cryptography/): Algorithm deep-dives, KMS integration, encoding formats, PQC migration
- [Identity & Access](https://cipherhub.cloud/categories/identity-access/): OIDC, SPIFFE/SPIRE, IAM, STS, credential management
- [AI & Agent Security](https://cipherhub.cloud/categories/ai-agent/): Agent security frameworks, threat models, credential isolation

## Optional

- [Tool Workflow Examples](https://tools.cipherhub.cloud/.well-known/llms-full.txt): Multi-tool chaining workflows for common cryptographic scenarios
- [RSS Feed](https://cipherhub.cloud/index.xml): Full-text RSS feed for blog content