Home▸Cybersecurity▸MDM Work Container: Key Hierarchy & Crypto-Shred Wipe

MDM Work Container: Key Hierarchy & Crypto-Shred Wipe (2D)

Interactive 2D simulator of enterprise mobile device management built on real WebCrypto: a container master key (KEK) wraps a per-file data key (DEK) for every managed file, files genuinely decrypt while the KEK exists, and a crypto-shred wipe deletes only the KEK — making every wrapped DEK, and therefore every file, provably unrecoverable via a real cryptographic failure.

Cybersecurity2DModerate60 FPS📱 Mobile-adapted⇄ 3D version

Details

CategoryCybersecurity

RenderingCanvas 2D

DifficultyModerate

Target FPS60

ControlsSlider sets the number of managed files in the work container, two buttons switch the per-file DEK length between AES-128 and AES-256, a Decrypt-all button runs a real WebCrypto unwrap-then-decrypt round trip per file, one button triggers a remote wipe that crypto-shreds the container KEK (deleting only the master key object, leaving ciphertext and wrapped DEKs visibly on disk), and one button re-enrolls the device with a fresh KEK and freshly wrapped DEKs.

mobile securityMDMencryptionsandboxingkey managemententerprise mobility

Related simulations

HSM Key Custody: 2D Queueing & Exposure-Window ModelA genuine 2D counterpart to the 3D HSM key-custody simulator: the hardware crypto core is…

Smartphone Patch Gap 2D: N-Day Exposure Gas SimulatorA 2D gas of bouncing smartphone particles undergoes real elastic collisions while each…

Tablet Fleet MDM Compliance Simulator (2D)Interactive 2D simulation of Mobile Device Management (MDM) compliance enforcement across a… ⊞ All 534 in Cybersecurity →

This simulator runs a real WebCrypto key hierarchy behind enterprise mobile device management: a genuine AES-GCM container master key (KEK) wraps a genuine per-file AES-GCM data key (DEK) for every managed file, and each file's content is genuinely encrypted under its own DEK. Opening a file performs a real crypto.subtle.unwrapKey + crypto.subtle.decrypt round trip. The remote-wipe control demonstrates crypto-shredding for real: it deletes only the in-memory KEK object, leaving every ciphertext byte and wrapped DEK visibly intact, and every subsequent decrypt attempt genuinely fails with a real WebCrypto OperationError — provable, live proof that the data is unrecoverable without ever touching the bytes on disk.

⚙ Under the hood

An interactive 3D simulator of enterprise mobile device management: a hardware root key derives a container key-encryption key that wraps every managed app's data key, app-sandboxing blocks personal apps from crossing the container boundary, and a remote wipe crypto-shreds the container key to instantly destroy all managed data.

mobile securityMDMencryptionsandboxingkey managemententerprise mobility

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install