cwe-780-rsa-without-oaep

Official

Secure RSA encryption with OAEP padding.

AuthorDevelopersCoffee
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill addresses the critical security vulnerability of using RSA encryption without proper OAEP padding, which can expose sensitive data to cryptographic attacks.

Core Features & Use Cases

  • Vulnerability Remediation: Identifies and provides secure alternatives for RSA implementations using weak PKCS1 padding.
  • Secure Cryptography: Ensures the use of modern, robust padding schemes like OAEP for RSA encryption.
  • Use Case: When a security audit flags the use of "RSA/ECB/PKCS1Padding" in your Java application, this Skill provides the exact code to replace it with the more secure "RSA/ECB/OAEPWithSHA-256AndMGF1Padding".

Quick Start

Remediate the CWE-780 vulnerability in the provided Java code snippet by replacing PKCS1Padding with OAEPWithSHA-256AndMGF1Padding.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: cwe-780-rsa-without-oaep
Download link: https://github.com/DevelopersCoffee/java-cwe-security-skills/archive/main.zip#cwe-780-rsa-without-oaep

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.