Private WebAssembly workspace

Detect, decode & crack ciphers — entirely in your browser.

Cipher Workbench reads the signal, points you at the right family, and runs broad-spectrum and focused attacks against classical ciphers, XOR, and encoded challenge payloads — then promotes the strongest candidate. No upload, no server round-trips.

Runs on a WebAssembly engine in your tab. Sign-in is handled by BlackWall.

Capabilities · What it does

Read the signal

Entropy, index of coincidence, letter frequencies and a recommended attack path — so you choose the right surface before committing.

Classical & keyed

Caesar, Vigenère, Affine, rail-fence and keyed columnar transposition, Playfair, Beaufort, Porta, autokey and rolling ciphers.

Bytes & numbers

Single-byte and repeating-key XOR with crib-dragging, plus modular and numeric-sequence decoding for coordinate-style payloads.

Automated cracking

A broad-spectrum pass tests common families, decoders and layered paths, then ranks and dedupes candidates onto a board.

Brute-force crack

Every cipher family runs in its own worker and is scored live against a dictionary in eight languages — the strongest plaintext floats to the top.

Pipelines, stego & batch

Chain decode layers, inspect images and containers (LSB, whitespace, ZIP/PDF), run wordlists, and fan out an unknown-family scan.

Workflow · How it works
  1. 1

    Paste

    Drop in ciphertext, encoded blobs, numeric sequences, or a whole challenge payload.

  2. 2

    Analyse

    Live analysis surfaces entropy, IOC and frequencies, and suggests the most promising family to try first.

  3. 3

    Attack

    Run a direct transform, a broad-spectrum crack, or a focused parallel crack scored against a dictionary.

  4. 4

    Promote

    Compare ranked candidates, promote the strongest plaintext, and feed it straight back into the next pass.

Privacy · Stays on your machine
Everything runs locally The cryptanalysis engine is compiled to WebAssembly and executes inside your browser. Runtime, workers and pipelines never leave the tab — nothing you paste is uploaded, logged, or sent to a server. Access to the workbench itself is gated by BlackWall single sign-on.

Ready to break something?

Sign in with BlackWall and the workbench opens straight away.