cryptography

What problem does it solve?

This Skill provides structured cryptography guidance to help teams identify and fix weak algorithms, insecure key management, and insecure random number generation across codebases, aligning with ASVS, OWASP, and NIST standards.

Core Features & Use Cases

• Weak Algorithm Detection: Flag usage of MD5, SHA1, DES/3DES, and ECB mode, with secure alternatives like SHA-256 and AES-256-GCM.
• Key Management & RNG: Guidance on secure key generation, storage, rotation, and using CSPRNGs, KMS, and envelope encryption patterns.
• Password Hashing & Signatures: Recommendations for bcrypt, Argon2, PBKDF2, RSA-PSS, and ECDSA with proper padding.
• Use Case: Review a web service credential flow, identify weak RNG and key handling, and propose secure replacements with sample code.

Quick Start

Use this skill to perform automated cryptography reviews by telling it to identify weaknesses, suggest ASVS-aligned fixes, and provide concrete code samples.