crypto-best-practices

What problem does it solve?

This skill guides developers and security engineers to implement cryptography correctly and securely, reducing misconfigurations and vulnerabilities.

Core Features & Use Cases

• Encryption best practices: Select and implement AES-GCM, ChaCha20-Poly1305, and TLS with modern configurations.
• Hashing and password storage: Use strong hashing algorithms with proper salting and peppering, e.g., bcrypt, Argon2.
• Key management: Establish secure key generation, rotation, and storage using managed services and safety practices.
• Use Case: A web app stores user data and tokens securely by following standard cryptography guidelines and rotating keys.

Quick Start

• Install chosen crypto libraries and configure environment (e.g., Bouncy Castle, Spring Security Crypto).
• Enable secure TLS in your deployment and use AES-256-GCM for data at rest.
• Hash passwords with Argon2id or bcrypt and rotate keys regularly.