wycheproof

Validate cryptographic implementations against Wycheproof test vectors.

Updated Jan 30, 2026
One-click install
npx skills add https://github.com/andrescardonas7/salchipapa-web --skill wycheproof-andrescardonas7
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/andrescardonas7/salchipapa-web/tree/main/.cursor/skills/testing-handbook-skills/wycheproof
Command: npx skills add https://github.com/andrescardonas7/salchipapa-web --skill wycheproof-andrescardonas7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps ensure the security and correctness of cryptographic implementations by testing them against a comprehensive suite of known vulnerabilities and edge cases.

Core Features & Use Cases

  • Test Vector Validation: Utilizes Wycheproof's extensive collection of test vectors for various cryptographic algorithms (AES-GCM, ECDSA, ECDH, etc.).
  • Edge Case Testing: Verifies that implementations correctly handle known attack patterns and malformed inputs.
  • Use Case: When developing or auditing a new TLS library, use this Skill to run Wycheproof's ECDSA test vectors to confirm it correctly validates signatures and rejects malformed ones, preventing potential exploits.

Quick Start

Use the wycheproof skill to validate an AES-GCM implementation against its test vectors.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate my AES-GCM implementation against known attack vectors?

You can validate AES-GCM implementations by parsing Wycheproof JSON test vectors and executing test harnesses to verify correctness against known attack patterns and expected outcomes. This confirms your symmetric encryption correctly rejects malformed inputs.

What are Wycheproof test vectors used for in cryptography testing?

Wycheproof test vectors are used to verify cryptographic implementations against known vulnerabilities and edge cases. They provide a comprehensive suite of tests for algorithms like AES-GCM, ECDSA, and ECDH to ensure security and correctness.

How do I test ECDSA signature validation to prevent exploits in my TLS library?

To test ECDSA signature validation, run Wycheproof's ECDSA test vectors through your implementation to confirm it correctly validates signatures and rejects malformed ones. This prevents potential exploits during TLS library development or auditing.

Can I use this to test ECDH key exchange algorithms for edge cases?

Yes, you can test ECDH key exchange algorithms using Wycheproof test vectors. The validation process parses JSON test vectors and executes test harnesses to verify that your key exchange implementation handles edge cases and malformed inputs correctly.

Does validating cryptographic implementations with Wycheproof require external dependencies?

Validating cryptographic implementations with Wycheproof requires no external dependencies. You only need to parse the provided JSON test vectors and execute test harnesses to verify implementation correctness against expected outcomes for your algorithms.

Why does my cryptographic implementation fail edge case testing with malformed inputs?

Cryptographic implementations fail edge case testing when they do not correctly handle known attack patterns and malformed inputs. Using Wycheproof test vectors helps identify these vulnerabilities by comparing your outputs against expected outcomes.