skills.rest
GhostPWN
GhostPWNOFFICIAL
Explore all skills by this author →
GitHub

Cryptographic Analysis & Assessment

Analyze cryptographic configurations and implementations for security weaknesses.

4|Updated Mar 10, 2026
Search Tags:#code review#cryptography#tls#ssl#key management#cipher suites#hash analysis
One-click install
npx skills add https://github.com/GhostPWN/ghostpwn --skill cryptographic-analysis-assessment
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Cryptographic Analysis & Assessment
Source: https://github.com/GhostPWN/ghostpwn/tree/main/src/skills/13-crypto-analysis
Command: npx skills add https://github.com/GhostPWN/ghostpwn --skill cryptographic-analysis-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps you quickly assess whether cryptography in servers, applications, and code is safe, modern, and correctly implemented.

Core Features & Use Cases

  • TLS and certificate auditing: Check protocol support, cipher strength, certificate validity, and security headers for exposed services.
  • Cryptographic code review: Spot hardcoded keys, weak modes, unsafe IV handling, unverified certificates, and poor randomness in implementation code.
  • Hash and key management review: Identify hash algorithms, evaluate password hashing strength, and judge whether key sizes and rotation practices are acceptable.
  • Use case: A security engineer can review a production HTTPS endpoint, confirm whether weak protocols are enabled, and get concrete hardening guidance.

Quick Start

Ask me to audit the TLS and cryptographic security of a host or code sample and summarize the risks, grades, and remediation steps.

Frequently Asked Questions about Cryptographic Analysis & Assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TLS configuration and cipher suites for security weaknesses?▼

Auditing TLS configuration involves checking protocol versions, cipher strength, certificate validity, and security headers. This Skill reviews exposed services to identify weak protocols and provides concrete hardening guidance for remediation.

How do I review cryptographic implementation code for unsafe IV handling and hardcoded keys?▼

Reviewing cryptographic code targets hardcoded keys, weak modes, unsafe IV handling, unverified certificates, and poor randomness. This Skill analyzes implementation code to spot these vulnerabilities and reports precise remediation steps.

Can I evaluate password hash strength and key management practices in server settings?▼

Evaluating password hash strength and key management is supported for server settings and code. This Skill identifies hash algorithms, judges key sizes, and assesses rotation practices to confirm whether configurations are acceptable.

What is the best way to assess SSL certificate validity and protocol support?▼

Assessing SSL certificate validity and protocol support requires checking exposed HTTPS endpoints. This Skill audits protocol support, certificate validity, and security headers, then summarizes risks and grades for production services.

Do I need post-quantum migration guidance when reviewing cryptographic implementations?▼

Post-quantum migration guidance is necessary when reviewing modern cryptographic implementations. This Skill assesses both classical and post-quantum cryptography, providing precise reporting and concrete remediation steps for migration.

How does cipher suite evaluation work during a cryptographic code review?▼

Cipher suite evaluation checks encryption strength and protocol versions during cryptographic code review. This Skill analyzes server settings and code to evaluate cipher strength, identify weak modes, and generate hardening guidance.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

tls-certificate-analysis

Extracts TLS certificate metadata, issuer, SANs, and JARM fingerprints.

Community
Advanced
zhanglimaozhanglimao
23

cryptographic-failures

Audit cryptographic implementations for weak algorithms, key management, and TLS vulnerabilities.

Community
Advanced
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced
woohyun212woohyun212
21

ssl-check

Inspect SSL/TLS certificate validity, protocol support, and cipher suites for a target host.

Community
Advanced