Interactive Demos

The Playground

See identity-addressed encryption that eliminates key exchange, PKI certificates, and quantum-vulnerable public-key crypto, live in your browser.

Two Classic Approaches — and Their Costs

HexaEight takes a different route: identity-addressed encryption with no key exchange.

1
AES-256, ChaCha20

Symmetric Encryption

Same password required

How do you share the password securely? You need another encrypted channel: a circular dependency.

2
RSA, ECC

Asymmetric / PKI

Quantum vulnerable in 5 to 10 years

Public/private keypairs require Certificate Authorities, renewal cycles, and revocation infrastructure.

3
Key predistribution, no PKI

HexaEight

No key exchange, no certificates

Each party derives keys from its own password plus platform-issued key material. Different passwords decrypt the same message — with no shared secret and no public-key exchange for a quantum computer to target.

Live Demos

The Breakthrough: See It Live

No installation required. Run directly in your browser.

Alice & Bob: Different Passwords Demo

Watch Alice encrypt with her password and Bob decrypt with his different password, yet both get the same message. This is the breakthrough.

Open fullscreen
Alice's Password
Zh-KyfbXqP-jbYxMIzKZAh9k2WgpUBWyQz2kaxwoU
Bob's Password
1JdldryK9YQzyBNDnf!37JCYTpb.DohLvZw17SoRNX0ALOuXF7#Wn
Result
Both decrypt to: Hello Bob!

Click the green "Run" button inside the demo to execute the code.

JWT Content Signing & Verification

See how HexaEight signs content without PKI. Verify authentic JWTs and detect tampering instantly.

Open fullscreen

Click the green "Run" button inside the demo to execute the code.

How Different-Password Decryption Works

Step-by-step: from Alice's password to Bob's plaintext.

1

Alice Encrypts

Alice derives a channel secret from her password plus Bob's platform-issued key material, then encrypts with a standard AEAD cipher (AES-256-GCM by default).

2

Platform Provides Destination Keys

The platform supplies Bob's key material based on his identity. The platform never sees Alice's password or the plaintext, and it is never in the message path.

3

Ciphertext Travels

The encrypted message can be stored anywhere: a database, message queue, or sent directly. No restrictions.

4

Bob Decrypts

Bob derives the same channel secret from his own password plus Alice's key material — so his keys reconstruct the same plaintext, despite the two sides using different passwords.

5

Bidirectional

The same process works in reverse. Bob can reply to Alice. Any identity can encrypt to any other identity.

SHAKE-256 · AEAD

Performance Benchmarks

Real-world throughput from the reference demo code. Performance improves at scale.

Message Size Throughput Trend
1 MB 13.2 MB/s Baseline
10 MB 14.5 MB/s Improving
100 MB 16.1 MB/s Better at scale
500 MB 17.8 MB/s Best performance 🚀

Hardware: Intel Xeon 8-core @ 2.5GHz, 30GB RAM

Ready to Integrate?

Deploy HexaEight in your application today.