heady-cryptographic-agility

Enable pluggable cipher suites and phi-scheduled key rotation for cryptographic systems.

1|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/HeadyAI/heady-context --skill heady-cryptographic-agility
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: heady-cryptographic-agility
Source: https://github.com/HeadyAI/heady-context/tree/main/heady-skills/heady-cryptographic-agility
Command: npx skills add https://github.com/HeadyAI/heady-context --skill heady-cryptographic-agility

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Solves the problem of rigid cryptographic stacks by enabling pluggable cipher suites and phi-scheduled key rotation.

Core Features & Use Cases

  • Pluggable cipher suite registry with category-based selection and CSL scoring
  • 3-active-version key rotation with phi-math constants and emergency rotation
  • Post-quantum readiness via PQC algorithms and hybrid modes
  • Runtime algorithm negotiation, deprecation workflows, and audit trails
  • Seamless integration with a governance layer and observability

Quick Start

Run the Express router to enable health checks, negotiation, and key rotation endpoints.

Frequently Asked Questions about heady-cryptographic-agility

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is cryptographic agility and why do I need it for my security stack?

Cryptographic agility enables seamless algorithm swaps and pluggable cipher suites within rigid cryptographic stacks. You need it to ensure PQC readiness, runtime algorithm negotiation, and auditable crypto operations across symmetric, asymmetric, hashing, and key-exchange domains.

How do I rotate encryption keys without causing system downtime?

You can rotate keys without downtime using phi-scheduled key rotation with 3-active-version management. This approach supports emergency rotation workflows and ensures multi-version key management alongside structured audit trails for continuous security governance.

Does this Skill support post-quantum cryptography and hybrid algorithms?

Yes, it supports post-quantum cryptography by enabling PQC algorithms and hybrid modes. It provides runtime algorithm negotiation to seamlessly integrate post-quantum readiness into your existing cipher suite registry with category-based selection.

How do I negotiate cipher suites at runtime and manage algorithm deprecation?

You can negotiate cipher suites at runtime by running the Express router endpoints for health checks and negotiation. It handles deprecation workflows through a pluggable cipher suite registry with CSL scoring and integrates with a governance layer for observability.

Can I use this for security governance and audit trail compliance?

Yes, you can use it for security governance and audit trail compliance. It generates structured audit trails for cryptographic operations, integrates with a governance layer, and provides observability over key rotation and algorithm negotiation workflows.

What are the limitations of using a pluggable cipher suite registry for algorithm swaps?

The pluggable cipher suite registry requires integration with a governance layer and observability tools to manage deprecation workflows effectively. You must run the Express router to enable negotiation and key rotation endpoints for proper security governance.