What problem does it solve?
This Skill ensures that Go code adheres to cryptographic standards and secure coding practices, reducing vulnerabilities.
Core Features & Use Cases
- Secure Randomness: Guides developers to use crypto/rand for all security-sensitive random values such as keys and nonces.
- Encryption Standards: Recommends using AES-256-GCM with unique nonces for encryption tasks.
- Secret Handling: Enforces zeroing out sensitive data and prevents secrets from appearing in logs or errors. Ideal for development teams building secure applications that require robust cryptography.
- Database Security: Promotes using encrypted databases like SQLCipher and deriving keys properly.
- Input Validation: Ensures all API inputs are validated to prevent injection attacks and leaks.
Quick Start
Follow guidelines in the skill to implement cryptography in your Go applications, ensuring secure key generation, encryption, and secret management.