cryptography-attacks

Execute RSA, AES, hash, and XOR attacks on cryptographic keys and messages.

1|Updated Jun 9, 2026

Search Tags:#cryptography #CTF #RSA #hash attacks #AES #side channel #XOR

Ready to run

npx skills add https://github.com/aivos-xie/hermes-skills --skill cryptography-attacks

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cryptography-attacks
Source: https://github.com/aivos-xie/hermes-skills/tree/main/security/cryptography-attacks
Command: npx skills add https://github.com/aivos-xie/hermes-skills --skill cryptography-attacks

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires sagemath, rsa-ctf-tool, hashcat, cyberchef, openssl, hashpumpy, fastcoll, chipwhisperer, python3, gmpy2, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill empowers you to uncover and exploit security vulnerabilities in cryptographic systems, ensuring the robustness and security of your digital assets.

Core Features & Use Cases

RSA Attacks: Execute Fermat factorization, common modulus, and Wiener attacks on RSA keys.
AES Attacks: Utilize Padding Oracle attacks, CBC bit flipping, and ECB mode weaknesses to break AES encryption.
Hash Attacks: Employ hash length extension attacks and collisions to bypass hash-based security measures.
Encoding/Decoding: Decode base64, hex, URL, JWT, and XOR-encoded data using CyberChef and command-line tools.
Side Channel Attacks: Perform timing and power side channel attacks to uncover weaknesses in cryptographic implementations.
XOR Attacks: Utilize single-byte and repeating key XOR attacks for encryption bypass.
CTF Cryptography: Employ various cryptographic techniques like Vigenere decryption, affine decryption, and lattice-based attacks for CTF challenges.

Quick Start

Analyze the cryptographic security of the given RSA public key by running the skill and selecting the 'RSA Attacks' option.

Frequently Asked Questions about cryptography-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I execute RSA attacks like Wiener or Fermat factorization on a given public key?▼

To execute RSA attacks, provide the RSA public key or ciphertext to trigger Fermat factorization, common modulus, or Wiener attacks. This reveals vulnerabilities in RSA key generation by exposing weak prime factors or small private exponents.

What is a hash length extension attack and how can I bypass hash-based security?▼

A hash length extension attack exploits algorithms like SHA-256 by appending data to a signed message without knowing the secret key. You can bypass hash-based security measures using tools like HashPumpy to forge valid authentication signatures.

How do I perform a Padding Oracle attack to break AES encryption?▼

To perform a Padding Oracle attack on AES, submit ciphertext blocks to a server and observe padding error responses. This decrypts AES-CBC encrypted data by systematically guessing and validating padding bytes.

Does this cryptography attack tool require SageMath or specific environments to run?▼

Yes, executing advanced cryptography attacks requires specific environments like SageMath for lattice-based attacks, GMPy2 for large integer math, and OpenSSL. These dependencies enable complex mathematical computations and cryptographic analysis.

What is the best way to decode XOR, base64, and JWT encoded data for CTF challenges?▼

The best way to decode XOR, base64, and JWT data is using CyberChef and command-line tools. This handles single-byte and repeating key XOR decryption, encoding bypasses, and token analysis for CTF cryptography challenges.

How do timing and power side channel attacks uncover weaknesses in cryptographic implementations?▼

Timing and power side channel attacks uncover cryptographic weaknesses by measuring execution time or power consumption during operations. Using tools like ChipWhisperer, this reveals secret keys by analyzing physical variations in the implementation.