wycheproof

Validate cryptographic implementations against Wycheproof test vectors.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill wycheproof-mejango
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/testing-handbook-skills/skills/wycheproof
Command: npx skills add https://github.com/mejango/juicy-vision --skill wycheproof-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Wycheproof provides a structured, community-maintained set of cryptographic test vectors to validate implementations against known vulnerabilities and edge cases, reducing the risk of subtle bugs in cryptographic code.

Core Features & Use Cases

  • Comprehensive test vectors: AES-GCM, ECDSA, ECDH, RSA, EdDSA, and related algorithms across multiple curves.
  • Test group organization: Groups by key sizes, IVs, curves to enable precise filtering and focused validation.
  • CI-ready workflows: Guidance and templates for integrating Wycheproof tests into automated pipelines for regression testing and security audits.
  • Use Case: Integrate into crypto libraries to catch signature malleability, DER encoding issues, padding problems, and invalid curve attacks during CI checks.

Quick Start

Run the wycheproof harness to load test vectors from testvectors_v1/aes_gcm_test.json and execute the validation suite.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate cryptographic implementations against known vulnerabilities?

Wycheproof validates cryptographic implementations by running a comprehensive set of test vectors against known vulnerabilities and edge cases. It checks algorithms like AES-GCM, ECDSA, and RSA to catch subtle bugs during code audits.

Can I integrate cryptographic test vectors into CI pipelines for regression testing?

Yes, you can integrate Wycheproof test vectors into CI pipelines for regression testing and security audits. The framework provides CI-ready workflows to automatically catch padding problems and invalid curve attacks during development.

What cryptographic algorithms and curves are covered by Wycheproof test vectors?

Wycheproof test vectors cover AES-GCM, ECDSA, ECDH, RSA, and EdDSA algorithms across multiple curves. Test groups are organized by key sizes, IVs, and curves to enable precise filtering and focused validation.

How do I run a wycheproof validation harness in Python or JavaScript?

To run a validation harness, you set up submodules or fetch scripts to acquire test vectors, parse the JSON test files, and implement Python or JavaScript harnesses to execute the suite and verify outcomes against expected results.

Does Wycheproof catch DER encoding issues and signature malleability in crypto libraries?

Yes, Wycheproof catches DER encoding issues, signature malleability, padding problems, and invalid curve attacks in crypto libraries. It exposes these vulnerabilities by validating implementations against structured community-maintained test vectors.