Implements NIST-standard AES-256-GCM encryption to protect sensitive data at rest with authenticated encryption and secure key derivation.
This skill provides a standardized framework for implementing AES-256 encryption in Galois/Counter Mode (GCM) to secure files and data stores. It covers the entire cryptographic lifecycle, including robust key derivation using Argon2 or PBKDF2, cryptographically secure IV/nonce management, and authenticated encryption to ensure data integrity. Designed for developers and security engineers, this skill facilitates the implementation of security controls aligned with NIST CSF 2.0 and FIPS 197, ensuring sensitive information remains protected against unauthorized access and tampering.
主要功能
01Tamper Detection via Authentication Tags
02Streaming Support for Large File Processing
03AES-256-GCM Authenticated Encryption
04Secure Key Derivation (Argon2, PBKDF2, scrypt)
054,121 GitHub stars
06Cryptographically Secure IV/Nonce Management
使用场景
01Establishing NIST-compliant security controls for regulatory data protection requirements
02Building secure backup and directory-level encryption utilities
03Securing local application data and configuration files in production environments
