Advise on applied cryptography, including TLS, encryption, hashing, and key management.
npx skills add https://github.com/0xMerl99/FangAI --skill crypto-expert
Please help me install this Agent Skill. Skill: crypto-expert Source: https://github.com/0xMerl99/FangAI/tree/main/crates/openfang-skills/bundled/crypto-expert Command: npx skills add https://github.com/0xMerl99/FangAI --skill crypto-expert
This Skill provides expert guidance on implementing secure cryptographic practices, ensuring the integrity and confidentiality of sensitive data and communications.
Consult the crypto expert for guidance on implementing secure TLS 1.3 configurations.
High-intent search queries and answers about installing and using this skill.
The best way to configure TLS 1.3 involves selecting strong cipher suites and following secure design principles to ensure data confidentiality and integrity. This approach focuses on secure algorithm selection and avoiding common configuration pitfalls.
To choose secure encryption and hashing functions, you should select high-level, audited cryptographic libraries like AES-GCM for symmetric encryption, Ed25519 for asymmetric encryption, and Argon2id for password hashing.
Nonce reuse causes severe security vulnerabilities because it can reveal plaintext data and compromise the entire encryption scheme. Avoiding nonce reuse and timing attacks is a core secure design principle for robust cryptographic systems.
You need a Key Management Service (KMS) or Hardware Security Module (HSM) for cryptographic key management to ensure secure key storage and handling. They provide robust key protection and prevent unauthorized access to sensitive cryptographic material.
Yes, you can and should use high-level, audited cryptographic libraries instead of implementing custom algorithms. Recommending these audited libraries is a primary practice to avoid common pitfalls and ensure secure system design.
balic-AI-ML-R-D-ResourcesIdentify and prompt for clarifications when security requirements or threat models are underspecified.
daemon-blockint-techDesign cryptographic architecture and reviews for PKI/TLS, key management, and protocols.
do360nowAnalyzes CI/CD pipeline configurations for security vulnerabilities and compliance risks.
marquesfelipIdentify and mitigate cryptographic weaknesses in systems and code.
