skills.rest
trailofbits
trailofbitsOFFICIAL
Explore all skills by this author →
Website𝕏@trailofbitsGitHub

wycheproof

Validate cryptographic implementations against Wycheproof test vectors for AES-GCM, ECDSA, EdDSA, and RSA.

6.5k|561|Updated Jan 14, 2026
Search Tags:#testing#security#cryptography#edge-cases#harness#test-vectors#wycheproof
One-click install
npx skills add https://github.com/trailofbits/skills --skill wycheproof-trailofbits
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/wycheproof
Command: npx skills add https://github.com/trailofbits/skills --skill wycheproof-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Wycheproof provides test vectors to validate cryptographic implementations against known vulnerabilities and edge cases, enabling teams to verify correctness and security across crypto primitives.

Core Features & Use Cases

  • Comprehensive test vectors covering AES-GCM, ECDSA, EdDSA, RSA to surface encoding bugs and edge-case handling
  • CI-ready guidance and reference harness patterns to integrate Wycheproof vectors into automated tests
  • Use Case: Validate encrypt/decrypt and sign/verify workflows in security-critical libraries

Quick Start

Fetch Wycheproof test vectors and integrate them into your crypto tests to validate encrypt/decrypt and sign/verify workflows.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my cryptographic library against known edge cases?▼

Test your cryptographic library against known edge cases by validating encrypt/decrypt and sign/verify workflows using curated Wycheproof test vectors. These vectors surface encoding bugs across primitives like AES-GCM, ECDSA, EdDSA, and RSA.

What is the best way to integrate crypto test vectors into a CI pipeline?▼

Integrating crypto test vectors into a CI pipeline requires parsing JSON-based Wycheproof test vectors and connecting them to your existing test harnesses. This setup validates proper handling of valid, invalid, and acceptable cryptographic results automatically.

Can I use Wycheproof to validate RSA and ECDSA sign and verify operations?▼

Yes, you can validate RSA and ECDSA sign and verify operations. Wycheproof provides comprehensive test vectors specifically covering these cryptographic primitives to help identify and prevent encoding bugs during security audits.

Does validating crypto implementations with Wycheproof require a specific test harness?▼

Validating crypto implementations with Wycheproof does require integration with a test harness. You must parse the JSON-based test vectors and implement logic to properly handle and categorize valid, invalid, and acceptable validation results.

What kind of vulnerabilities do Wycheproof test vectors help identify?▼

Wycheproof test vectors help identify vulnerabilities related to encoding bugs and improper edge-case handling in cryptographic implementations. They validate correctness and security across primitives including AES-GCM, ECDSA, EdDSA, and RSA.

Related Skills

Explore More Software Engineering Skills→
iiammaeiiammae

vector-forge

Generate cryptographic test vectors in Wycheproof JSON format via mutation testing.

Community
Advanced
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

wycheproof

Validate cryptographic implementations against Wycheproof test vectors.

Official
Advanced
jeremylongshorejeremylongshore
2.6k

scanning-container-security

Scan container images and running containers for vulnerabilities using Trivy or Snyk.

Community
Intermediate
woohyun212woohyun212
21

property-based-testing

Generate diverse inputs to test security invariants across Python, Rust, JavaScript, Solidity, and Go.

Community
Intermediate