crypto-expert

Name: crypto-expert
Availability: InStock
Author: ginkida

Guide secure cryptographic design, TLS, and key management with audited libraries.

20|6|Updated Apr 3, 2026

Search Tags:#encryption #cryptography #tls #secure-design #key-management #cryptographic-agility #audited-libraries

Ready to run

npx skills add https://github.com/ginkida/rustyhand --skill crypto-expert-ginkida

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: crypto-expert
Source: https://github.com/ginkida/rustyhand/tree/main/crates/rusty-hand-skills/bundled/crypto-expert
Command: npx skills add https://github.com/ginkida/rustyhand --skill crypto-expert-ginkida

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides expert guidance on applied cryptography, TLS, key management, and secure design to help teams implement strong cryptography using audited libraries.

Core Features & Use Cases

Choose audited libraries (OpenSSL, libsodium, ring, RustCrypto) over hand-rolled implementations.
Favor authenticated encryption (AEAD), cryptographic agility, and envelope encryption with secure key management.
Design for secure key storage with HSMs/KMS and clear key lifecycle practices.
Provide practical design guidance for secure communications and data protection.

Quick Start

Design a secure cryptographic module using modern primitives and proper key management for a new service.

Frequently Asked Questions about crypto-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I design a secure cryptographic module with proper key management?▼

To design secure cryptographic modules, favor audited libraries like OpenSSL or libsodium, apply AEAD encryption schemes, ensure cryptographic agility, and implement envelope encryption with secure key storage in HSMs or KMS.

What is envelope encryption and when do I need it for secure key storage?▼

Envelope encryption is a technique wrapping data encryption keys with master keys stored in secure hardware like HSMs or KMS. You need it to protect data at rest while keeping master keys isolated from application logic.

How to choose audited cryptography libraries over hand-rolled implementations?▼

Choose audited cryptography libraries like OpenSSL, libsodium, ring, or RustCrypto over hand-rolled implementations to ensure robust data protection and avoid vulnerabilities in secure protocol selection.

Does my TLS configuration support cryptographic agility for secure communications?▼

Cryptographic agility in TLS allows systems to swap encryption primitives or protocols rapidly. Achieve it by selecting audited libraries that support configurable algorithm suites for secure communications and smooth library integration across platforms.

Why should I prefer AEAD schemes for authenticated encryption in transit and at rest?▼

Prefer AEAD schemes for authenticated encryption to ensure simultaneous confidentiality and integrity for data in transit and at rest. This approach prevents tampering and avoids vulnerabilities common in non-authenticated encryption primitives.

What are the limitations of using hand-rolled cryptographic implementations?▼

Hand-rolled cryptographic implementations lack the rigorous auditing of established libraries like RustCrypto or ring, introducing severe limitations such as side-channel vulnerabilities, weak protocol selection, and improper key lifecycle management.