wycheproof

Validate cryptographic implementations against Wycheproof attack vectors and edge cases.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/keremtoker468-dotcom/restoran --skill wycheproof-keremtoker468-dotcom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/keremtoker468-dotcom/restoran/tree/main/.claude/skills/wycheproof
Command: npx skills add https://github.com/keremtoker468-dotcom/restoran --skill wycheproof-keremtoker468-dotcom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps ensure the correctness and security of cryptographic implementations by providing a comprehensive suite of test vectors for known attacks and edge cases.

Core Features & Use Cases

  • Cryptographic Validation: Test implementations of algorithms like AES-GCM, ECDSA, ECDH, and RSA against established test vectors.
  • Vulnerability Detection: Identify common flaws such as signature malleability, invalid encoding, and padding oracle attacks.
  • Use Case: When developing a new TLS library, use this Skill to rigorously test its cryptographic primitives against known weaknesses before deployment.

Quick Start

Use the wycheproof skill to validate the AES-GCM implementation against the provided test vectors.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate my AES-GCM implementation against known attack vectors?

You can validate AES-GCM implementations by parsing JSON test vectors from the Wycheproof suite and executing a test harness against your target crypto library to detect correctness flaws and security vulnerabilities.

What cryptographic vulnerabilities can Wycheproof test vectors detect?

Wycheproof test vectors detect cryptographic vulnerabilities including signature malleability, invalid encoding, and padding oracle attacks across symmetric encryption, digital signatures, and key exchange algorithms.

How do I test an ECDSA or ECDH library for padding oracle attacks?

To test for padding oracle attacks in ECDSA or ECDH libraries, apply known attack vectors and edge cases from the Wycheproof test suite by parsing its JSON test vectors and running them against your implementation.

Can I use Wycheproof test vectors to test a custom TLS library before deployment?

Yes, you can use Wycheproof test vectors to rigorously test custom TLS library cryptographic primitives against known weaknesses before deployment, ensuring the correctness and security of algorithms like RSA and AES-GCM.

Does validating cryptographic implementations with Wycheproof require parsing JSON?

Yes, validating cryptographic implementations with Wycheproof requires parsing JSON test vectors to extract the known attack vectors and edge cases needed to execute test harnesses against your target crypto libraries.

What is the best way to check digital signature implementations for invalid encoding flaws?

The best way to check digital signature implementations for invalid encoding flaws is to validate them against established Wycheproof test vectors, which provide comprehensive edge cases for algorithms like ECDSA and RSA.