Private Key Converter & PEM Inspector
Inspect, format, and convert RSA, ECDSA, Ed25519, and OpenSSH keys. Compute cryptographic fingerprints and create .env single-line configurations safely without sending private keys across the internet.
Cryptographic Key Encodings & Standards
1. PEM vs. DER Encoding
DER (Distinguished Encoding Rules) is the binary ASN.1 representation of a cryptographic object. PEM (Privacy-Enhanced Mail) simply wraps that binary DER payload in Base64 with plain-text header and footer armor.
2. PKCS#1 vs. PKCS#8
PKCS#1 (BEGIN RSA PRIVATE KEY) is an older standard strictly for RSA keys. Modern systems prefer PKCS#8 (BEGIN PRIVATE KEY), an algorithm-agnostic wrapper that identifies the cipher (RSA, ECDSA, Ed25519) via an OID metadata header.
3. Cloud & .env Multi-line Escapes
When storing PEM private keys in environment files (.env), GitHub Secrets, or AWS Parameter Store, newline characters often break parsing. Escaping newlines as literal \n strings prevents runtime syntax failures in Node.js and Python.
Security Guarantee: Zero Private Key Telemetry
Never paste production private keys into online tools that transmit input over HTTP to backend servers. SpeedDrain uses purely client-side browser JavaScript (window.crypto.subtle and Base64 string dissection). You can inspect your browser's Network tab or run this tool in offline mode to verify that zero packets leave your machine.