A modern, secure web application for generating PGP and SSH key pairs with automatic cleanup and rate limiting.
- RSA Encryption: Support for 2048, 3072, and 4096-bit key strengths
- Automatic Cleanup: Generated keys are securely deleted after 5 minutes
- Rate Limiting: 10 requests per hour with burst capacity protection
- Security Headers: Comprehensive HTTP security headers (HSTS, CSP, X-Frame-Options)
- Secure File Handling: Private keys are overwritten with random data before deletion
- Responsive Design: Mobile-first approach with clean, minimal interface
- Twitter Blue Theme: Professional color scheme with accessibility features
- Real-time Validation: Live form validation with clear error messages
- Progress Indicators: Loading states and generation progress feedback
- Tooltips: Helpful explanations for technical concepts
- PGP Key Pairs: RSA-based PGP keys with configurable expiration
- SSH Key Pairs: Optional SSH keys for server authentication
- Custom Metadata: User name and email integration
- Flexible Expiry: Keys can expire from 1 day to 10 years (or never)
- Spring Security: Comprehensive security configuration
- Input Validation: Server-side and client-side validation
- Error Handling: Graceful error management and user feedback
- Logging: Detailed security and operation logging
- Framework: Spring Boot 3.2.0
- Language: Java 17
- Security: Spring Security with custom headers
- Cryptography: Bouncy Castle (PGP), JSch (SSH)
- Rate Limiting: Bucket4j
- Build Tool: Maven
- Template Engine: Thymeleaf
- Styling: Custom CSS with CSS Grid and Flexbox
- JavaScript: Vanilla JS with modern ES6+ features
- Icons: Feather Icons
- Responsive: Mobile-first design patterns
- HTTPS Ready: Security headers for production deployment
- CSP: Content Security Policy for XSS protection
- Rate Limiting: Token bucket algorithm
- Memory Management: Automatic resource cleanup
- Java 17 or higher
- Maven 3.6+
-
Clone the repository
git clone https://github.com/hexawulf/KeyJolt.git cd KeyJolt -
Build the application
mvn clean install
-
Run the server
mvn spring-boot:run
-
Access the application
http://localhost:5000
The application can be configured via application.properties:
# Server Configuration
server.port=5000
server.address=0.0.0.0
# Rate Limiting
app.rate-limit.requests-per-hour=10
app.rate-limit.burst-capacity=5
# File Cleanup (milliseconds)
app.key-cleanup-delay=300000
# Encryption Defaults
app.encryption.default-strength=4096
app.encryption.max-expiry-days=3650Copy src/main/resources/application-example.properties to
src/main/resources/application.properties and adjust values for
your environment. Do not commit secrets to version control.
- Fill out the form with your name and email address
- Select encryption strength (2048, 3072, or 4096 bits)
- Set key expiry (0 for never expires, or 1-3650 days)
- Optionally enable SSH key generation
- Click "Generate Keys" and wait for processing
- Download your keys immediately (they're deleted after 5 minutes)
Generated files follow this pattern:
- PGP Public:
email_name_pubkey_KEYID.asc - PGP Private:
email_name_seckey_KEYID.asc - SSH Public:
email_name_ssh_pub.key - SSH Private:
email_name_ssh_priv.key
keyjolt/
├── src/main/java/com/keyjolt/
│ ├── KeyjoltApplication.java # Spring Boot main class
│ ├── config/
│ │ └── SecurityConfig.java # Security configuration
│ ├── controller/
│ │ └── KeyController.java # REST endpoints
│ ├── service/
│ │ ├── PgpKeyService.java # PGP key generation
│ │ └── SshKeyService.java # SSH key generation
│ ├── model/
│ │ ├── KeyRequest.java # Request DTO
│ │ └── KeyResponse.java # Response DTO
│ └── util/
│ └── FileUtils.java # Secure file operations
├── src/main/resources/
│ ├── templates/
│ │ └── index.html # Main UI template
│ ├── static/
│ │ ├── css/style.css # Styling
│ │ └── js/script.js # Frontend logic
│ └── application.properties # Configuration
└── pom.xml # Maven dependencies
- Stateless Sessions: No server-side session storage
- CSRF Protection: Disabled for API endpoints (stateless design)
- Rate Limiting: Per-IP token bucket with hourly limits
- File Security: Automatic cleanup with secure deletion
- Input Validation: Both client and server-side validation
- Use HTTPS in production environments
- Configure proper firewall rules
- Set up monitoring and alerting
- Regular security updates
- Restrict access to
/actuatorendpoints or disable them - Set
SPRING_PROFILES_ACTIVE=productionfor production builds
- Private keys are generated server-side and immediately deleted
- No keys are logged or permanently stored
- Users must download keys immediately
- Secure random number generation used throughout
- Default: 10 requests per hour per IP
- Burst capacity: 5 requests per minute
- Configurable via application properties
- Fork the repository
- Create a feature branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add some AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
This project is licensed under the MIT License - see the LICENSE file for details.
0xWulf
- Email: dev@0xwulf.dev
- GitHub: @hexawulf
- Bouncy Castle for robust cryptographic libraries
- Spring Boot for the excellent framework
- Feather Icons for beautiful, lightweight icons
- JSch for SSH key generation capabilities
Made with ❤️ for secure key generation
KeyJolt - Secure Keys, Instantly