rcbj · rcbjBlueMars · Jul 17, 2026 · Jul 17, 2026 · Jul 17, 2026 · Jul 17, 2026
diff --git a/README.md b/README.md
diff --git a/client/Dockerfile b/client/Dockerfile
@@ -71,6 +71,8 @@ RUN browserify src/introspection.js -o public/js/introspection.js --debug --stan
 
 RUN browserify src/logout.js -o public/js/logout.js --debug --standalone logout -t [ envify purge --CONFIG_FILE ${CONFIG_FILE} ]
 RUN browserify src/jwt_tools.js -o public/js/jwt_tools.js --debug --standalone jwt_tools -t [ envify purge --CONFIG_FILE ${CONFIG_FILE} ]
+RUN browserify src/encoding_tools.js -o public/js/encoding_tools.js --debug --standalone encoding_tools -t [ envify purge --CONFIG_FILE ${CONFIG_FILE} ]
+RUN browserify src/digital_signature.js -o public/js/digital_signature.js --debug --standalone digital_signature -t [ envify purge --CONFIG_FILE ${CONFIG_FILE} ]
 #COPY src/debugger2_js.js public/js
 
 # ---- Code coverage (opt-in) ----
@@ -83,7 +85,7 @@ RUN if [ "$COVERAGE" = "true" ]; then \
       npm install --no-save babelify babel-plugin-istanbul @babel/core nyc ; \
     fi
 RUN if [ "$COVERAGE" = "true" ]; then \
-      for entry in "jwks:jwks" "debugger:debug" "token_detail:token_detail" "debugger2:debugger2" "userinfo:userinfo" "introspection:introspection" "logout:logout" "jwt_tools:jwt_tools"; do \
+      for entry in "jwks:jwks" "debugger:debug" "token_detail:token_detail" "debugger2:debugger2" "userinfo:userinfo" "introspection:introspection" "logout:logout" "jwt_tools:jwt_tools" "encoding_tools:encoding_tools" "digital_signature:digital_signature"; do \
         src_name="${entry%%:*}" ; \
         standalone="${entry##*:}" ; \
         browserify src/${src_name}.js -o public/js/${src_name}.js --debug --standalone ${standalone} -t [ envify purge --CONFIG_FILE ${CONFIG_FILE} ] -t [ babelify --plugins [ istanbul ] ] && \

diff --git a/client/build.js b/client/build.js
@@ -51,6 +51,8 @@ const BUNDLES = [
   ['introspection', 'introspection'],
   ['logout', 'logout'],
   ['jwt_tools', 'jwt_tools'],
+  ['encoding_tools', 'encoding_tools'],
+  ['digital_signature', 'digital_signature'],
 ];
 
 const CALLBACK_HTML = `<!DOCTYPE html>

diff --git a/client/package-lock.json b/client/package-lock.json
diff --git a/client/package.json b/client/package.json
@@ -10,6 +10,9 @@
   },
   "dependencies": {
     "@fidm/x509": "^1.2.1",
+    "@noble/curves": "1.4.0",
+    "@noble/hashes": "1.4.0",
+    "@noble/post-quantum": "^0.4.1",
     "@peculiar/asn1-pkcs8": "latest",
     "asn1js": "^3.0.10",
     "browserify": "^17.0.1",
@@ -18,14 +21,14 @@
     "dompurify": "latest",
     "envify": "latest",
     "express": "^4.22.2",
-    "html-minifier-terser": "^7.2.0",
     "express-logging": "latest",
     "html-minifier-terser": "^7.2.0",
     "jquery": "latest",
     "jsonwebtoken": "latest",
     "jwk-to-pem": "latest",
     "jwks": "latest",
     "logops": "latest",
+    "node-forge": "^1.3.1",
     "pem-file": "latest",
     "pkijs": "^3.4.0",
     "terser": "^5.44.0",

diff --git a/client/public/css/digital_signature.css b/client/public/css/digital_signature.css
@@ -0,0 +1,171 @@
+/* Compact layout for the Digital Signature (SLH-DSA) page. Mirrors the sizing
+   used on the JWT Tools and Encoding / Hashing Tools pages. Loaded last so it
+   overrides the shared container/legend/textarea rules. */
+
+/* Widen the shared (otherwise narrow) bootstrap container for this page only */
+.container {
+  width: 96%;
+  max-width: 1500px;
+}
+
+.ds-return {
+  font-size: 0.85em;
+  margin: 4px 0 2px;
+}
+
+.ds-intro {
+  font-size: 0.82em;
+  line-height: 1.35;
+  margin: 6px 0 10px;
+  color: #444;
+}
+.ds-intro strong { color: #b00; }
+
+/* Compact panes side by side; wrap to one column on narrow viewports. */
+.ds-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(300px, 460px));
+  gap: 10px;
+  align-items: start;
+  justify-content: start;
+}
+@media (max-width: 640px) {
+  .ds-grid { grid-template-columns: 1fr; }
+}
+
+.ds-grid fieldset {
+  border: 1px solid #aaa;
+  border-radius: 6px;
+  padding: 4px 10px 8px;
+  margin: 0;
+  min-width: 0;
+  background: #fafafa;
+}
+.ds-grid legend {
+  width: auto;              /* override common.css legend { width: 540px } */
+  font-weight: bold;
+  font-size: 0.95em;
+  padding: 0 6px;
+  border: none;
+  margin: 0;
+  color: #333;
+}
+
+/* Expand-all / collapse-all control row. */
+.ds-controls { margin: 0 0 10px; display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.ds-ctl-btn { font-size: 0.78em; padding: 3px 10px; cursor: pointer; }
+.ds-controls-hint { font-size: 0.72em; color: #777; }
+
+/* Collapsible panes — click a legend to collapse/expand its fieldset. */
+.ds-grid legend { cursor: pointer; user-select: none; }
+.ds-grid legend::before { content: "\25be\00a0"; color: #666; font-size: 0.9em; } /* down triangle */
+.ds-grid fieldset.ds-collapsed legend::before { content: "\25b8\00a0"; }            /* right triangle */
+.ds-grid fieldset.ds-collapsed > *:not(legend) { display: none; }
+.ds-grid fieldset.ds-collapsed { padding-bottom: 4px; }
+
+/* Asymmetric / Symmetric badge on each pane legend */
+.ds-badge {
+  font-size: 0.62em;
+  font-weight: 700;
+  padding: 1px 6px;
+  border-radius: 10px;
+  vertical-align: middle;
+  margin-left: 6px;
+  text-transform: uppercase;
+  letter-spacing: 0.03em;
+}
+.ds-asym { background: #e6f0ff; color: #1b4b8f; border: 1px solid #b9d3f2; }
+.ds-sym  { background: #f3e9ff; color: #5a2a8f; border: 1px solid #d8bef0; }
+
+/* In-pane performance note (SLH-DSA) */
+.ds-note {
+  font-size: 0.72em;
+  line-height: 1.35;
+  margin: 4px 0 8px;
+  padding: 5px 8px;
+  color: #663c00;
+  background: #fff8e6;
+  border: 1px solid #f0d48a;
+  border-radius: 4px;
+}
+.ds-note code { font-size: 0.95em; }
+
+.ds-field { margin: 0 0 5px; }
+.ds-field > label {
+  display: block;
+  font-size: 0.72em;
+  font-weight: 600;
+  color: #333;
+  margin-bottom: 1px;
+}
+
+/* Label carrying an inline Copy button next to the description */
+.ds-field > label.ds-has-copy {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 6px;
+}
+.ds-copy {
+  font-size: 10px;
+  font-weight: 600;
+  padding: 1px 7px;
+  line-height: 1.5;
+  cursor: pointer;
+  flex: 0 0 auto;
+}
+
+.ds-grid textarea,
+.ds-grid input[type="text"],
+.ds-grid select {
+  width: 100%;
+  box-sizing: border-box;
+  font-size: 0.8em;
+  padding: 3px 4px;
+  margin: 0;
+}
+.ds-grid textarea {
+  font-family: ui-monospace, Menlo, Consolas, "Courier New", monospace;
+  resize: vertical;
+  line-height: 1.25;
+}
+
+/* Inline control rows (select + button, sign/validate buttons) */
+.ds-row {
+  display: flex;
+  gap: 6px;
+  flex-wrap: wrap;
+  align-items: flex-end;
+  margin-bottom: 5px;
+}
+.ds-row > * { margin: 0; }
+.ds-grow { flex: 1 1 0; min-width: 0; }
+
+.ds-grid input[type="submit"] {
+  font-size: 0.8em;
+  padding: 5px 12px;
+  cursor: pointer;
+  white-space: nowrap;
+}
+
+/* Sub-section divider inside the pane (Key Pair) */
+.ds-sub {
+  border-top: 1px dashed #bbb;
+  margin-top: 8px;
+  padding-top: 6px;
+}
+.ds-sub-title {
+  font-weight: 700;
+  font-size: 0.82em;
+  margin-bottom: 5px;
+  color: #333;
+}
+
+/* Single-line status readout */
+.ds-status {
+  font-size: 0.72em !important;
+  color: #555;
+  background: #f0f0f0;
+  border: 1px solid #ddd;
+  margin-bottom: 0;
+}