skills.rest
alicangnll
alicangnllCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Cryptographic Vulnerabilities

Analyze cryptographic implementations for weak algorithms, side-channels, and key management flaws.

Updated Aug 6, 2026
Search Tags:#vulnerability assessment#key management#cryptographic analysis#algorithmic security#side-channel attack
One-click install
npx skills add https://github.com/alicangnll/Spectra --skill cryptographic-vulnerabilities
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Cryptographic Vulnerabilities
Source: https://github.com/alicangnll/Spectra/tree/main/spectra/skills/builtins/crypto-vuln
Command: npx skills add https://github.com/alicangnll/Spectra --skill cryptographic-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill analyzes cryptographic implementations to identify and mitigate vulnerabilities such as weak algorithms, side-channels, and key management flaws.

Core Features & Use Cases

  • Algorithm Identification: Detects weak algorithms like DES, RC4, MD5, SHA1, and AES-ECB.
  • Weak Primitive Detection: Identifies broken hash functions, weak encryption modes, and PRNG vulnerabilities.
  • Side-Channel Discovery: Identifies timing attacks, cache/timing side channels, and power/EM side channels.
  • Padding Oracle Attacks: Detects CBC and RSA padding oracle vulnerabilities.
  • Key Management Issues: Identifies hardcoded keys, key derivation issues, and key reuse vulnerabilities.

Quick Start

Analyze the cryptographic implementation in 'app.py' for potential vulnerabilities.

Frequently Asked Questions about Cryptographic Vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for cryptographic vulnerabilities like weak algorithms and side-channel attacks?▼

To check for cryptographic vulnerabilities, analyze your software implementation to identify weak algorithms like DES or RC4, detect side-channel leaks, and uncover key management flaws such as hardcoded keys. This process evaluates algorithm choices, random number generation, and implementation flaws.

What cryptographic implementation flaws lead to padding oracle attacks?▼

Padding oracle vulnerabilities in cryptographic implementations stem from flawed CBC and RSA encryption modes. Analyzing your code can detect these specific padding oracle issues, alongside weak primitive vulnerabilities like broken hash functions and PRNG flaws.

How do I detect timing attacks and side-channel leaks in my encryption code?▼

Detecting timing attacks and side-channel leaks involves analyzing your cryptographic implementation for cache, timing, and power/EM emissions. The analysis identifies how your software processing logic inadvertently exposes secret cryptographic data.

Can I analyze hardcoded keys and key derivation issues in Python scripts?▼

Yes, you can analyze Python scripts to identify key management issues, including hardcoded keys, improper key derivation, and key reuse vulnerabilities. The analysis examines the cryptographic implementation directly within your provided codebase.

What are common weak encryption modes and broken hash functions to scan for?▼

Common weak encryption modes and broken hash functions to scan for include AES-ECB, MD5, and SHA1. Analyzing cryptographic implementations identifies these broken primitives, weak algorithms, and PRNG vulnerabilities to mitigate potential security risks.

Related Skills

Explore More Software Engineering Skills→
ievo-aiievo-ai

vuln-scan

Scan source code modules for vulnerabilities and validate exploit chains.

Official
Advanced
DevelopersCoffeeDevelopersCoffee
3

cwe-326-inadequate-encryption-strength

Replace weak encryption algorithms and key sizes in Java code with AES-256 and RSA 2048-bit standards.

Official
Intermediate
seb1nseb1n
147

static-application-security-testing

Run SAST scans with Semgrep and CodeQL to detect vulnerabilities in source code.

Community
Advanced
thejefflarsonthejefflarson
20

cryptographic-failures

Detect and remediate cryptographic weaknesses in software code.

Community
Advanced