Built-in Node Reference

Comprehensive reference for all 83 built-in nodes organized by palette category. Each node page documents its cryptographic algorithm or data operation, when to use it, parameter configuration, fixed vs. dynamic port I/O specifications, error cases, and workflow examples.

Input/Output Data

• Static Value (input-static-value): Provides a constant value of a user-selected type (bytes/string/int/bool)
• Random Value (input-random): Generates a cryptographically secure random value of a user-selected type (bytes/string/int/bool)
• ValueSet (input-value-set): A value set: each row is an output port whose value is fixed, random, or taken from its own input port
• Switch (switch): Picks one of several value sets and unpacks it into individual output ports
• User Input Dialog (input-dialog): Prompts user for runtime input via dialog or fallback test value, of a user-selected type
• Output Inspector (output-inspector): Captures and displays inspected values in the Output console window
• Workflow Input (workflow-input): Workflow ingress interface. Injects external API inputs or custom-node caller parameters.
• Workflow Output (workflow-output): Workflow egress interface. Gathers final pipeline results for API response or caller return.
• Webhook / API Input (input-webhook-api): Fetches HTTP payload or Webhook response into workflow
• Link Box (link-box): Groups links into a named set (e.g. Key/IV/AAD) that moves together.

Data Conversion & Encoding

• Bytes to Hex (converter-bytes-to-hex): Encodes raw byte array into hexadecimal string representation
• Hex to Bytes (converter-hex-to-bytes): Decodes a hexadecimal string into a raw byte array
• Bytes to Base64 (converter-bytes-to-base64): Encodes raw byte array into Base64 / Base64URL string
• Base64 to Bytes (converter-base64-to-bytes): Decodes Base64 or Base64URL string into raw byte array
• Bytes to Base58 (converter-bytes-to-base58): Encodes raw byte array into Base58 string (Bitcoin / Flickr)
• Base58 to Bytes (converter-base58-to-bytes): Decodes Base58 string into raw byte array
• Bytes to String (converter-bytes-to-string): Decodes byte array into human-readable text string (UTF-8, ASCII, Latin-1)
• String to Bytes (converter-string-to-bytes): Encodes text string into raw byte array using specified charset
• Int to Bytes (utility-int-to-bytes): Converts an unsigned integer to bytes (length: minimal, fixed, or from the Length port)
• Bytes to Int (utility-bytes-to-int): Interprets bytes as an unsigned integer (bigint when beyond the safe range)
• Bytes to Multibase (converter-bytes-to-multibase): Encodes bytes into self-describing Multibase string with format prefix
• Multibase to Bytes (converter-multibase-to-bytes): Decodes self-describing Multibase string with automatic prefix detection

Utility

• Block Padding (padding-block-pad): Applies cryptographic block padding (PKCS#7, ANSI X9.23, ISO/IEC 9797-1 Method 1/2/3, NIST SP 800-38B, None)
• Block Unpadding (padding-block-unpad): Removes cryptographic block padding (PKCS#7, ANSI X9.23, ISO/IEC 9797-1 Method 2/3, None)
• Asymmetric Padding (padding-asymmetric): RSA OAEP (Encoding/Decoding) and RSA PSS (Encoding) padding schemes (PKCS#1 v2.2 / RFC 8017)
• Byte Concatenator (utility-concat): Concatenates bytes, string, int and bool inputs in input port order (A || B || C ...)
• Bitwise Logic (utility-bitwise): Performs bitwise logic (XOR, AND, OR) across byte arrays of equal length
• Bit Shift & Rotate (utility-bitshift): Shifts or rotates a byte array by a number of bits (SHL, SHR, ROL, ROR)
• Bit Inversion (NOT) (utility-bitwise-not): Inverts all bits (One's Complement, ~) of the input bytes
• Endian Converter (utility-endian): Reverses the byte order of the input (big-endian <-> little-endian)
• Byte Slicer (utility-slicer): Extracts bytes like the script slice b[offset, length]: empty length = to the end, negative = end position counted from the back (excluded)
• Value Comparator (utility-compare): Compares two values of the same type (bytes, string, int, bool) with ==, !=, >, >=, <, <=
• Byte Length (utility-byte-length): Converts the input to bytes (string = UTF-8, int = minimal length, bool = 1 byte) and returns the byte count
• Script (utility-script): Runs a built-in script (Python subset) over bytes/int/bool/string ports

Symmetric Ciphers

• AES Encrypt (symmetric-aes-encrypt): Encrypts plaintext using NIST AES (128/192/256-bit)
• AES Decrypt (symmetric-aes-decrypt): Decrypts ciphertext using NIST AES (128/192/256-bit)
• TDES Encrypt (symmetric-tdes-encrypt): Triple-DES (112 or 168-bit Key) Encryption (NIST SP 800-67)
• TDES Decrypt (symmetric-tdes-decrypt): Triple-DES (112 or 168-bit Key) Decryption
• DES Encrypt (symmetric-des-encrypt): Single DES (56-bit effective, 8-byte key) Encryption (FIPS 46-3 Legacy)
• DES Decrypt (symmetric-des-decrypt): Single DES (56-bit effective, 8-byte key) Decryption
• SEED Encrypt (symmetric-seed-encrypt): KISA National Standard SEED 128/256-bit Block Cipher (RFC 4269)
• SEED Decrypt (symmetric-seed-decrypt): KISA National Standard SEED 128/256-bit Block Cipher Decryption
• ARIA Encrypt (symmetric-aria-encrypt): KISA Standard ARIA (128/192/256-bit) Block Cipher (RFC 5794)
• ARIA Decrypt (symmetric-aria-decrypt): KISA Standard ARIA Block Cipher Decryption
• Camellia Encrypt (symmetric-camellia-encrypt): NTT & Mitsubishi Standard Camellia (128/192/256-bit) Block Cipher (RFC 3713)
• Camellia Decrypt (symmetric-camellia-decrypt): NTT & Mitsubishi Standard Camellia Block Cipher Decryption
• SM4 Encrypt (symmetric-sm4-encrypt): Chinese National Standard SM4 128-bit Block Cipher (GB/T 32907 / GM/T 0002)
• SM4 Decrypt (symmetric-sm4-decrypt): Chinese National Standard SM4 128-bit Block Cipher Decryption
• ChaCha20-Poly1305 Encrypt (symmetric-chacha20-poly1305-encrypt): RFC 8439 Authenticated Encryption with Additional Data (AEAD)
• ChaCha20-Poly1305 Decrypt (symmetric-chacha20-poly1305-decrypt): RFC 8439 Authenticated Decryption with Additional Data (AEAD)
• ChaCha20 Stream (symmetric-chacha20-stream): Pure ChaCha20 Stream Cipher without Poly1305 MAC (RFC 8439)

Asymmetric & Elliptic Curve

• RSA Key Generator (asymmetric-rsa-keygen): Generates RSA public/private keypair (1024, 2048, 3072, 4096-bit, PEM & DER)
• RSA Encrypt (asymmetric-rsa-encrypt): Encrypts message using RSA-OAEP with recipient public key (RFC 8017)
• RSA Decrypt (asymmetric-rsa-decrypt): Decrypts ciphertext using RSA-OAEP with private key (RFC 8017)
• RSA Sign (asymmetric-rsa-sign): Creates digital signature using RSA-PSS or PKCS#1 v1.5 with private key
• RSA Verify (asymmetric-rsa-verify): Verifies digital signature using RSA-PSS or PKCS#1 v1.5 with public key
• ECC Keypair Generator (asymmetric-ecc-keygen): Generates Elliptic Curve keypair (NIST P-256/384/521, secp256k1, Brainpool)
• ECC Sign (ECDSA) (asymmetric-ecc-sign): Signs message or hash using private key on specified curve
• ECC Verify (ECDSA) (asymmetric-ecc-verify): Verifies ECDSA signature against public key on specified curve
• ECDH Key Agreement (asymmetric-ecc-ecdh): Computes Elliptic Curve Diffie-Hellman shared secret on Weierstrass curves (NIST SP 800-56A / RFC 5903)
• Ed25519 KeyGen (asymmetric-ed25519-keygen): Generates Ed25519 32-byte keypair
• Ed25519 Sign (asymmetric-ed25519-sign): High-speed Edwards-curve digital signature (RFC 8032)
• Ed25519 Verify (asymmetric-ed25519-verify): Verifies Ed25519 signature (RFC 8032)
• X25519 KeyGen (asymmetric-x25519-keygen): Generates X25519 keypair for ECDH
• X25519 Key Exchange (ECDH) (asymmetric-x25519-ecdh): Montgomery-curve Diffie-Hellman shared secret (RFC 7748)

Post-Quantum Cryptography

• ML-KEM KeyGen (FIPS 203) (pqc-mlkem-keygen): Post-Quantum Lattice-based Key Encapsulation Mechanism keypair generator
• ML-KEM Encapsulate (pqc-mlkem-encaps): Encapsulates a shared key against recipient public key
• ML-KEM Decapsulate (pqc-mlkem-decaps): Decapsulates shared key using secret key and ciphertext
• ML-DSA KeyGen (FIPS 204) (pqc-mldsa-keygen): Post-Quantum Lattice-based Digital Signature Algorithm keypair generator
• ML-DSA Sign (pqc-mldsa-sign): Creates post-quantum digital signature (FIPS 204)
• ML-DSA Verify (pqc-mldsa-verify): Verifies post-quantum digital signature (FIPS 204)
• SLH-DSA KeyGen (FIPS 205) (pqc-slhdsa-keygen): Stateless Hash-Based Digital Signature Algorithm keypair generator (FIPS 205)
• SLH-DSA Sign (FIPS 205) (pqc-slhdsa-sign): Signs message using stateless hash-based signature scheme (FIPS 205)
• SLH-DSA Verify (FIPS 205) (pqc-slhdsa-verify): Verifies stateless hash-based digital signature (FIPS 205)
• Hybrid KEM KeyGen (pqc-hybridkem-keygen): Generates Post-Quantum Hybrid Keypair (X25519 + ML-KEM-768)
• Hybrid KEM Encapsulate (pqc-hybridkem-encaps): Encapsulates shared secret using hybrid X25519 + ML-KEM-768 recipient public key
• Hybrid KEM Decapsulate (pqc-hybridkem-decaps): Decapsulates shared secret using hybrid secret key and ciphertext

Hash & MAC & CRC

• Cryptographic Hash (hash-digest): Computes cryptographic hash (SHA-2, SHA-3, BLAKE3)
• HMAC Generator (mac-hmac): Hash-based Message Authentication Code (RFC 2104)
• CMAC Generator (mac-cmac): NIST SP 800-38B Cipher-based MAC (AES-128/256 or 3DES)
• CRC Generator (utility-crc): Universal Parametric Cyclic Redundancy Check (Rocksoft Model: 8, 16, 32, 64-bit)

Key Derivation

• PBKDF2 Key Derivation (kdf-pbkdf2): Password-Based Key Derivation Function 2 (RFC 8018)
• HKDF Key Derivation (kdf-hkdf): HMAC-based Extract-and-Expand Key Derivation (RFC 5869)