crypto-expert

Secure password hashing relies on algorithms like Argon2id, while data encryption uses AES-256-GCM. This Skill guides you through selecting these audited algorithms and secure implementation patterns to protect user authentication and sensitive storage.

Configuring TLS 1.3 requires selecting recommended cipher suites and secure protocol designs. This Skill provides guidance on implementing secure TLS infrastructures, certificate pinning, and avoiding common cryptographic pitfalls like timing attacks.

Envelope encryption works by encrypting data keys with a master key stored in a KMS or HSM. This Skill advises on key management strategies, ensuring keys at rest are protected using secure hardware modules or encrypted storage systems.

Nonce reuse compromises cryptographic security by exposing plaintext relationships in encryption schemes like AES-256-GCM. This Skill addresses implementation pitfalls such as nonce reuse and timing attacks, recommending well-audited libraries to prevent them.

Yes, Ed25519 is suitable for secure token signing and cryptographic protocol design. This Skill focuses on recommending secure algorithm choices like Ed25519 and guides developers on implementing secure protocols and token signing mechanisms.

You need HSMs or KMS for key management when protecting master keys used in envelope encryption. This Skill advises on protecting keys at rest, recommending HSMs, KMS, or encrypted storage depending on your system's security requirements.