What are 'result flags' in Wycheproof?

Result flags indicate whether a specific test vector should pass (valid), fail (invalid), or is considered acceptable under certain implementation constraints.

Which algorithms does this skill support?

It supports a wide range of algorithms including AES-GCM, RSA, ECDSA, EdDSA, HMAC, HKDF, and ChaCha20-Poly1305.

Wycheproof is a collection of test vectors developed by Google to verify the correctness of cryptographic libraries and test them against known attacks.

Can I use this to detect timing side-channel attacks?

No, Wycheproof focuses on logical correctness and edge cases. For timing side-channels, you should use specialized constant-time testing tools.

How do I integrate Wycheproof into my CI/CD pipeline?

This skill provides implementation patterns to add Wycheproof as a git submodule and automate the parsing of JSON test vectors into your testing framework.

Wycheproof Crypto Testing

Name: Wycheproof Crypto Testing
Author: fjor1025

byfjor1025

0•

보안 및 테스팅

Validates cryptographic implementations using a comprehensive suite of test vectors to prevent known vulnerabilities and edge cases.

The Wycheproof skill integrates Google's Project Wycheproof test vectors into your development workflow, allowing you to rigorously verify the correctness of cryptographic libraries and implementations. It provides specialized guidance for testing algorithms like AES-GCM, RSA, and ECDSA against sophisticated attack patterns, including signature malleability and invalid curve attacks. This skill is essential for developers and security auditors who need to ensure their crypto code handles edge cases correctly and remains resilient against historical vulnerabilities by providing standardized test vectors and implementation patterns for CI/CD integration.

주요 기능

010 GitHub stars

02Detection of complex vulnerabilities like signature malleability and padding oracles

03Comprehensive test vectors for major algorithms including AES, RSA, and ECDSA

04Support for both symmetric encryption and asymmetric signature verification

05Step-by-step guidance for building test harnesses in Python and JavaScript

06Automated testing workflows for CI/CD integration using JSON schemas

사용 사례

01Auditing third-party cryptographic libraries for security compliance and correctness

02Validating custom implementations of standard algorithms like ChaCha20-Poly1305

03Setting up automated security regression tests in a CI/CD pipeline

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework wycheproof

For use in Claude.ai and ChatGPT

주요 기능

010 GitHub stars

02Detection of complex vulnerabilities like signature malleability and padding oracles

03Comprehensive test vectors for major algorithms including AES, RSA, and ECDSA

04Support for both symmetric encryption and asymmetric signature verification

05Step-by-step guidance for building test harnesses in Python and JavaScript

06Automated testing workflows for CI/CD integration using JSON schemas

사용 사례

01Auditing third-party cryptographic libraries for security compliance and correctness

02Validating custom implementations of standard algorithms like ChaCha20-Poly1305

03Setting up automated security regression tests in a CI/CD pipeline