wycheproof

Validate cryptographic implementations against Wycheproof attack-oriented test vectors.

Updated May 2, 2026
One-click install
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill wycheproof-ayehiaa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/wycheproof
Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill wycheproof-ayehiaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Wycheproof helps you detect subtle cryptographic correctness and validation bugs by running your implementation against known attack-focused test vectors, including edge cases that often slip through standard unit tests.

Core Features & Use Cases

  • Test-vector driven crypto testing: Verify encryption/decryption, sign/verify, and key exchange behavior using structured JSON test cases with expected outcomes.
  • Known-attack and edge-case coverage: Exercise inputs designed to trigger real-world failure modes such as signature malleability, invalid encodings, invalid curve attacks, and AEAD tag issues.
  • CI-friendly harness patterns: Use result flags (valid/acceptable/invalid) and group filtering (by key/IV/curve parameters) to make repeatable automated tests.

Core Use Case Example: You want confidence that your ECDSA or AES-GCM implementation rejects malformed inputs and handles encoding/validation correctly; Wycheproof provides test vectors specifically crafted to catch these issues.

Quick Start

Use the wycheproof skill to load the appropriate Wycheproof JSON test vectors for your algorithm, parse the test groups, and generate a test harness that asserts your implementation behavior matches each test case result.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my cryptographic implementations against known attack vectors?

You test cryptographic implementations by loading Wycheproof JSON test vectors designed to trigger real-world failure modes like signature malleability and invalid curve attacks, then running a deterministic harness that asserts your implementation matches each test case's expected valid, acceptable, or invalid result.

What are Wycheproof test vectors and how do they validate crypto security?

Wycheproof test vectors are structured JSON test cases containing known attack inputs and edge cases that validate crypto security by checking if implementations correctly reject malformed inputs, invalid encodings, and AEAD tag issues across established algorithms and curves.

Can I use Wycheproof vectors for CI testing and automated AES-GCM validation?

Yes, Wycheproof vectors support CI testing and automated AES-GCM validation by parsing JSON test groups, filtering by key or IV parameters, and using result flags like valid, acceptable, and invalid to create repeatable automated tests that verify AEAD encryption and decryption behavior.

Does Wycheproof testing cover signature malleability and ECDSA edge cases?

Yes, Wycheproof testing covers signature malleability and ECDSA edge cases by providing attack-focused test vectors that verify your signature verification logic correctly rejects malformed inputs and handles encoding validation across established cryptographic curves.

How do I parse Wycheproof JSON schema fields to build a crypto test harness?

To build a crypto test harness, parse Wycheproof JSON schema fields by extracting test groups, converting vector attributes, and handling expected result flags (valid, acceptable, invalid) to assert your implementation's behavior matches each test case outcome deterministically.

What's the best way to catch AEAD tag validation issues in my encryption code?

The best way to catch AEAD tag validation issues is running your encryption code against Wycheproof AEAD test vectors, which provide structured JSON inputs designed to trigger real-world failure modes and verify your implementation rejects malformed tags correctly.