wycheproof

Validate cryptographic implementations using standardized test vectors for known vulnerabilities.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill wycheproof-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/wycheproof
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill wycheproof-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the difficulty of verifying cryptographic implementations by providing a comprehensive suite of test vectors to detect known vulnerabilities and edge cases.

Core Features & Use Cases

  • Vulnerability Detection: Identifies common flaws like signature malleability, padding oracles, and invalid curve attacks.
  • Standardized Testing: Provides consistent test vectors for symmetric encryption, signatures, key exchange, and hashing.
  • Use Case: When implementing a new ECDSA verification module, use this Skill to run the provided test vectors to ensure your code correctly handles non-canonical DER encodings and prevents signature forgery.

Quick Start

Use the wycheproof skill to load the test vectors for aes-gcm and validate your implementation against the provided test groups.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my cryptographic implementation for known vulnerabilities and edge cases?

To test cryptographic implementations for known vulnerabilities, you validate your code against standardized test vectors covering algorithms like AES-GCM, ECDSA, and RSA to detect flaws such as signature malleability and padding oracles.

What are standardized test vectors used for in encryption validation?

Standardized test vectors in encryption validation provide consistent data groups for symmetric encryption, signatures, key exchange, and hashing to ensure your cryptographic primitives correctly handle established attack patterns and edge cases.

Can I detect ECDSA signature malleability and invalid curve attacks using test vectors?

Yes, you can detect ECDSA signature malleability and invalid curve attacks by running your verification module against provided test vectors that check for non-canonical DER encodings and prevent signature forgery.

Does this validation approach support AES-GCM and RSA algorithms?

Yes, this validation approach supports a wide range of algorithms including AES-GCM, ECDSA, and RSA, providing specific test groups to verify correctness and security compliance for each cryptographic standard.

What is the best way to prevent padding oracle attacks in my cryptography code?

The best way to prevent padding oracle attacks in cryptography code is to rigorously test your implementation against established test vectors designed to expose common flaws like padding oracles and invalid curve attacks.