Skill UI

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

Master the creation of a two-tier Public Key Infrastructure (PKI) Certificate Authority hierarchy—including an offline Root CA and an operational Intermediate CA. This skill guides you through using OpenSSL and Python cryptography to manage X.509 certificate issuance, configure Certificate Revocation Lists (CRLs), set up OCSP responders, and enforce strict certificate policies. Essential for deploying robust trust anchors for TLS, code signing, or client authentication.

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

A comprehensive guide for cryptanalysts detailing advanced attack vectors against RSA cryptography. This playbook covers factorization methods, small exponent exploits (e.g., Hastad Broadcast), lattice-based attacks (Wiener's, Boneh-Durfee), and methods exploiting protocol weaknesses like padding oracles. Essential for CTF challenges and authorized security assessments.

A comprehensive guide for engineering the migration from classical public-key cryptography to quantum-resistant standards. This skill covers building a Cryptographic Bill of Materials (CBOM) to inventory assets, prioritizing migration based on Harvest-Now-Decrypt-Later (HNDL) risk, and deploying hybrid PQC key exchange (e.g., X25519MLKEM768) on critical channels like TLS, VPN, and SSH. Essential for achieving long-term quantum readiness and crypto-agility.

This skill executes comprehensive historical backtesting using the high-performance neural-trader engine. It supports features like walk-forward validation and captures key financial metrics (Sharpe, Drawdown). Critically, it signs the resulting artifact using Ed25519 cryptography, providing non-repudiable tamper evidence required for promoting research models to live trading systems.

This comprehensive guide helps authors strategically position their computer security manuscripts for the ACM Conference on Computer and Communications Security (CCS). It details topic fit, required threat modeling, evidence presentation, and critical comparisons with sister venues (e.g., S&P, USENIX Security). It serves as a high-level 'fit/framing' tool for maximizing submission success in core areas like privacy, cryptography, and systems security.

A comprehensive strategy guide for authors preparing manuscripts for the ACM Symposium on Theory of Computing (STOC). It helps researchers determine the ideal fit, required evidence bar, and narrative framing for major theoretical contributions in algorithms, complexity, cryptography, and theoretical computer science.

This guide helps authors assess whether their computer security manuscript is suitable for the European Symposium on Research in Computer Security (ESORICS). It covers conference positioning, necessary evidence standards (e.g., threat models, empirical validation), and scope definition across privacy, systems, and cryptography, ensuring the paper meets the high academic bar of the venue.