wycheproof

Validate cryptographic implementations using standardized JSON test vectors.

Updated Jul 20, 2026
One-click install
npx skills add https://github.com/trancee/MeshLink-template --skill wycheproof-trancee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wycheproof
Source: https://github.com/trancee/MeshLink-template/tree/main/.agents/skills/wycheproof
Command: npx skills add https://github.com/trancee/MeshLink-template --skill wycheproof-trancee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a comprehensive suite of test vectors to ensure cryptographic implementations are resilient against known attacks, spec edge cases, and common implementation bugs.

Core Features & Use Cases

  • Extensive Coverage: Access 340+ JSON test vector files covering 30+ algorithms including AEAD, signatures, key exchange, and KDFs.
  • Vulnerability Detection: Identify implementation flaws related to 80+ attack categories, including Bleichenbacher, Manger, and signature malleability.
  • Use Case: Integrate these vectors into your CI/CD pipeline to automatically verify that your library correctly handles both valid inputs and malicious edge cases, preventing security regressions.

Quick Start

Use the wycheproof skill to load the test vectors for AES-GCM and validate your implementation against the provided test groups.

Frequently Asked Questions about wycheproof

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my cryptographic library against known attacks like Bleichenbacher and padding oracle flaws?

To test cryptographic libraries against known attacks, load standardized JSON test vectors covering 80+ vulnerability categories like Bleichenbacher and padding oracle flaws. This validates your implementation's resilience to malicious edge cases and spec deviations.

What are cryptographic test vectors and when do I need them for security testing?

Cryptographic test vectors are standardized JSON datasets defining valid inputs and malicious edge cases for algorithms like AES-GCM. You need them to verify spec-compliant security testing and detect implementation bugs in production-grade cryptographic libraries.

Can I integrate automated vulnerability assessment test vectors into a CI/CD pipeline?

Yes, you can integrate JSON vulnerability assessment test vectors into CI/CD pipelines to automatically verify cryptographic implementations. This prevents security regressions by validating that libraries correctly handle both valid inputs and malicious edge cases.

Does this test vector suite cover specific cryptographic algorithms like AEAD, signatures, and key exchange?

Yes, the test vector suite covers 30+ cryptographic algorithms including AEAD, signatures, key exchange, and KDFs. It provides 340+ JSON test vector files to validate implementations across a wide array of attack scenarios.

What is the best way to detect signature malleability and invalid curve attacks in my crypto implementation?

The best way to detect signature malleability and invalid curve attacks is using standardized JSON test vectors designed for vulnerability assessment. These vectors expose implementation flaws by testing cryptographic libraries against known attack patterns.

What types of cryptographic implementation bugs can JSON test vectors help identify?

JSON test vectors identify cryptographic implementation bugs related to 80+ attack categories, including signature malleability, invalid curve attacks, Bleichenbacher, Manger, and padding oracle flaws. This ensures resilience against spec edge cases.