Crypto
RSA Key Pair Generator
Create an RSA signing-key pair and export a public SPKI PEM and an unencrypted private PKCS#8 PEM for compatibility testing.
About this tool
When to use it
Create an RSA signing-key pair and export a public SPKI PEM and an unencrypted private PKCS#8 PEM for compatibility testing.
How to use it
Choose 2048 or 3072 bits, generate keys, and inspect the public and private labels. Copy or download only the part required by the destination. Test import and signing in that destination before relying on the pair.
Guide updated . Examples checked against this implementation.
Worked examples
Recognize the two PEM containers
Input
Generate a 2048-bit pairExpected output
Public: -----BEGIN PUBLIC KEY-----
Private: -----BEGIN PRIVATE KEY-----These are format markers, not complete keys. The base64 body is generated randomly. Public and private files serve different purposes.
Errors and unsupported input
An SSH tool rejects the exported private keyCheck the required key container and algorithm. PEM PKCS#8 is not an OpenSSH private-key file, and conversion may be required in a trusted tool.
Continue this workflow
- HMAC Generator: Use a shared-key MAC when a public/private-key system is unnecessary.
Questions
Frequently asked questions
Can I share both files with a verifier?
A verifier needs the public key. Giving away the private key allows others to act as its holder.