cryptography-key-management

Audit cryptographic implementations, key lifecycle, and PKI health.

3|3|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/jaskaranhundal/usap-skills --skill cryptography-key-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cryptography-key-management
Source: https://github.com/jaskaranhundal/usap-skills/tree/main/identity-access/cryptography-key-management
Command: npx skills add https://github.com/jaskaranhundal/usap-skills --skill cryptography-key-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the critical security risks associated with weak or improperly managed cryptographic keys and certificates, ensuring robust protection against data breaches and compliance failures.

Core Features & Use Cases

  • Crypto Posture Assessment: Audits cryptographic algorithms, key sizes, and TLS configurations against modern security standards.
  • Key Lifecycle Management: Enforces rotation policies for certificates, access keys, and encryption keys, and monitors for expiry.
  • Vulnerability Detection: Identifies weak or forbidden algorithms, expired certificates, and insecure key storage practices.
  • Use Case: Automatically scan your cloud environment for any AWS IAM access keys that haven't been rotated in over 90 days and flag them for immediate action.

Quick Start

Assess the current cryptographic posture and identify any expiring certificates within the next 30 days.

Frequently Asked Questions about cryptography-key-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess my cryptographic posture and check for weak TLS configurations?

To assess your cryptographic posture, you need to audit cryptographic algorithms, key sizes, and TLS configurations against modern security standards. This process identifies weak or forbidden algorithms and insecure storage practices to ensure intended security guarantees.

How do I automate key lifecycle management and enforce rotation policies for certificates?

Automating key lifecycle management involves enforcing rotation policies for certificates, access keys, and encryption keys while monitoring for expiry. This ensures cryptographic material is continuously governed and expired certificates are flagged for action.

What is cryptographic key management and when do I need it?

Cryptographic key management is the governance of crypto posture, key lifecycles, and PKI health. You need it to protect against data breaches and compliance failures caused by weak or improperly managed cryptographic keys and certificates.

Can I use this to scan my cloud environment for AWS IAM access keys that haven't been rotated?

Yes, you can scan your cloud environment to detect AWS IAM access keys that haven't been rotated in over 90 days. It flags exposed or unrotated cryptographic material for immediate action to maintain security.

Does crypto posture assessment support post-quantum cryptography requirements?

Crypto posture assessment evaluates your cryptographic implementations against approved algorithms and key sizes, including post-quantum considerations. It ensures your TLS configurations and cryptographic controls meet modern security standards.

What's the best way to identify expired certificates and weak cryptographic algorithms?

The best way to identify expired certificates and weak algorithms is through vulnerability detection scans. This audits your cryptographic controls, detects forbidden algorithms, and monitors certificate expiry to enforce adherence to approved security standards.