All comparisons

[ KL / COMPARE / BPTOOLS ]

KeyLab vs EFTLab BP-Tools

Open in the browser versus a Windows suite you now have to request from the vendor. A side-by-side comparison for payment security engineers choosing between EFTLab BP-Tools and KeyLab.

Summary

BP-Tools by EFTLab has been the de-facto desktop tool for payment cryptography testing since 2013. It is a comprehensive Windows-only suite covering HSM commands, key blocks, PIN operations, EMV scripting, ISO 8583 parsing, and SPB. It became the industry default largely because it was freeware for years — but it is no longer freely downloadable: the SourceForge project stopped publishing builds and EFTLab now directs people to contact the company for access. EFTLab separately sells EFTtools, a bundle of its Multi-Purpose Cryptographic Calculator and HSM Commander, for a one-time USD 999; the full EFTsim testing suite is quote-only.

KeyLab takes a different approach: it opens in the browser with nothing to request and nothing to install, exposes the same everyday operations (PIN Block ISO 9564, DUKPT, TR-31, ARQC, ISO 8583, Thales payShield command simulation), and adds shareable URLs for tool state, dark mode, and a desktop app for offline work — including a bench that talks to a real payShield over TCP.

For occasional users, sole practitioners, students, and teams that need to onboard new engineers quickly, KeyLab's zero-friction model — free on the web — is hard to beat. For shops that already own BP-Tools licenses and prefer a single Windows installer with vendor support, BP-Tools remains a solid choice — they pioneered the category.

Feature Comparison

FeatureKeyLabEFTLab BP-Tools
How you get itOpen the site, or download the desktop appContact EFTLab — no public download
PriceFree on the web; desktop: sign in with a free accountEFTtools bundle: USD 999 one-time; full EFTsim suite: quote only
PlatformBrowser + Desktop (Electron, all OS)Windows desktop only
Install requiredNo (browser) or optionalYes (.exe installer)
Account requiredFree account to operate — the same account signs you in on the web and the desktopLicense key required
PIN Block formatsISO 9564 Formats 0, 1, 2, 3, 4Formats 0, 1, 2, 3
DUKPT3DES + AES (X9.24-3)3DES (X9.24-1)
TR-31 / Thales Key BlockBoth, plus translationBoth
Thales payShield commands37 host commands + 111 console commands simulatedFull command set
EMV ARQC / ARPCYesYes
ISO 8583 parserYesYes
Brazilian SPB / PIXYes (STR, SPI, DICT)No
Post-Quantum (ML-KEM, ML-DSA)YesNo
Real payShield over TCPYes (desktop bench, port 1500)Yes (HSM Commander)
Dark modeYesNo
AI assistantYes (Claude-powered, 50 free credits/mo)No
Open sourceNo (free, but proprietary)No

When KeyLab fits

  • •You need to run a quick PIN Block, DUKPT, or ARQC check without installing anything.
  • •You're onboarding new engineers and want them productive in the first 5 minutes.
  • •You work across Mac, Linux, Windows, or rotate between machines.
  • •You need Brazilian PIX/SPB support out of the box.
  • •You want post-quantum (ML-KEM, ML-DSA) tools today.
  • •Your team has zero budget for tools or you're a solo consultant.
  • •You want to try it right now without opening a vendor conversation.

When EFTLab BP-Tools fits

  • •You already have BP-Tools licenses and team workflows built around it.
  • •You require a Windows-installable suite for compliance / IT-policy reasons.
  • •You need vendor-backed support contracts from EFTLab specifically.
  • •You operate in a fully air-gapped environment and prefer the established installer.

Frequently Asked Questions

Is KeyLab really free?▾
The web toolkit is free forever. Every cryptographic tool — PIN Block, DUKPT, TR-31, ARQC, ISO 8583, Thales payShield simulation, post-quantum, the works — is free on the web: you create a free account to operate the tools (browsing them requires nothing), and the desktop app signs in with the same free account. The AI assistant gives 50 free credits per month per user.
Wasn't BP-Tools freeware? What does it cost now?▾
It was freeware for years, which is much of why it became the industry default. It is no longer freely downloadable: the SourceForge project stopped publishing builds and EFTLab directs people to contact the company. EFTLab sells EFTtools — its Multi-Purpose Cryptographic Calculator plus HSM Commander — for a one-time USD 999, and the full EFTsim testing suite is quote-only. KeyLab keeps the everyday toolkit open in the browser; paid tiers cover the desktop bench and the conformance workflow around it.
Can I use KeyLab offline?▾
Yes. The KeyLab Desktop app (Electron-based, Mac/Windows/Linux) bundles every tool and keeps working with the wire unplugged once you are signed in. The browser version also works offline once loaded because all cryptography runs client-side.
Does KeyLab support all the same commands as BP-Tools?▾
KeyLab's HSM Simulator implements 37 Thales payShield host commands covering the most common production workflows (A0-A6 key generation, BA/CA/CY PIN translation, M0/M2 MAC, DC/DG PVV, KW/KQ ARQC, NC diagnostics), plus 111 console commands. BP-Tools implements a broader Thales command set, including legacy variants KeyLab does not cover.
How is KeyLab's data handled? Is it sent to your servers?▾
No. All cryptographic operations run entirely in your browser using client-side JavaScript. PINs, keys, PANs, and any other sensitive data never leave your device. The only data sent to KeyLab servers is anonymous page-view analytics and (if you use the AI assistant) your AI prompts.
Can my team use KeyLab without each member creating accounts?▾
No — each member signs in with their own free account, on the web and on the desktop, and the session follows them between the two. Creating one takes under a minute and there is no seat limit or cost. Shared team workspaces, roles, and a signed record of who ran what are planned for the paid team tier.