wycheproof

Validate cryptographic implementations against Wycheproof JSON test vectors.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill wycheproof-ramprasad4121
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/testing-handbook-skills/skills/wycheproof
Command: npx skills add https://github.com/Ramprasad4121/srp --skill wycheproof-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps ensure the correctness and security of cryptographic implementations by providing a comprehensive suite of test vectors for known attacks and edge cases.

Core Features & Use Cases

  • Test Vector Validation: Utilizes Wycheproof's extensive collection of JSON test vectors to verify cryptographic algorithms like AES, ECDSA, ECDH, and RSA.
  • Edge Case & Attack Testing: Specifically designed to catch subtle bugs and known vulnerabilities in cryptographic libraries.
  • Use Case: When developing or auditing a new ECDSA signature verification function, use this Skill to run it against Wycheproof's test vectors to ensure it correctly handles valid, invalid, and malformed signatures according to established cryptographic standards.

Quick Start

Use the wycheproof skill to validate an AES-GCM implementation against its test vectors.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate my cryptographic implementations against known attack vectors?

Validate cryptographic implementations by parsing JSON test vectors and executing them against target crypto functions. This process catches subtle bugs and known vulnerabilities in algorithms like AES, ECDSA, and RSA.

What are Wycheproof test vectors used for in security audits?

Wycheproof test vectors verify cryptographic algorithms during security audits by providing extensive JSON edge cases and known attacks. They ensure libraries correctly handle valid, invalid, and malformed cryptographic inputs.

How do I test an AES-GCM implementation for edge cases and vulnerabilities?

Test AES-GCM implementations by applying the Wycheproof test suite. This validation checks your code against established cryptographic standards, ensuring it correctly processes edge cases and prevents common vulnerabilities.

Can I use this validation approach for ECDSA signature verification functions?

Yes, you can validate ECDSA signature verification functions using this approach. It applies Wycheproof test vectors to ensure your function correctly handles valid, invalid, and malformed signatures according to established cryptographic standards.

What formats do Wycheproof test vectors use for validating cryptographic libraries?

Wycheproof test vectors use the JSON format for validating cryptographic libraries. You must parse these JSON test vectors and execute them against your target cryptographic functions to verify algorithm correctness and adherence to standards.

Why does my cryptographic library fail edge case testing during security audits?

Cryptographic libraries fail edge case testing due to subtle bugs in handling invalid or malformed inputs. Validating against Wycheproof test vectors identifies these vulnerabilities, ensuring your implementation prevents common attacks and adheres to cryptographic standards.