Ed25519 key pair generate
Generate an Ed25519 key pair, on your device; the private key never leaves your browser.
Ed25519 key pair generate draws 32 random bytes for the secret key with crypto.getRandomValues, derives the public key, and wraps both in fixed RFC 8410 PEM headers. There are no options, so every run gives an unrelated fresh pair. The private key prints unprotected, with no passphrase around it, so the page output itself is the secret to guard.
Questions
What format are the keys in?
PEM, with a fixed RFC 8410 header wrapped around the raw 32-byte key, one PUBLIC KEY block and one PRIVATE KEY block.
Where does the randomness come from?
crypto.getRandomValues, drawing 32 random bytes as the secret key before the public key is derived from it.
Is the private key protected?
No, it prints in full, in the clear, with no passphrase wrapped around it.
What options can I set?
None, the options object is empty; every run gives an unrelated fresh pair.
Can I use this from the command line?
Yes, the same code runs on the page, the CLI and MCP.