cryptographic-analysis--assessment

# Cryptographic Analysis & Assessment ## Purpose Enable Claude to assist with cryptographic security assessments including SSL/TLS configuration auditing, cipher suite analysis and recommendation, hash algorithm identification, encryption implementation code review, key management evaluation, and detection of cryptographic vulnerabilities. Claude directly analyzes provided configurations and code. --- ## Activation Triggers This skill activates when the user asks about: - Auditing SSL/TLS configuration of a server or service - Evaluating cipher suites for security strength - Identifying hash algorithms from hash values or code - Reviewing code for cryptographic implementation flaws - Assessing key lengths, key management, or rotation policies - Detecting hardcoded keys, weak IVs, or ECB mode usage - Generating TLS configuration recommendations (Mozilla profile) - Certificate analysis (expiration, chain, transparency) - Post-quantum cryptography guidance - Password hashing implementation review (bcrypt, Argon2, PBKDF2) --- ## Prerequisites ```bash pip install cryptography requests pyOpenSSL ``` **Recommended tools:** - `sslyze` — Python TLS scanner - `testssl.sh` — Comprehensive TLS testing - `openssl` — Command-line TLS operations - `Wireshark` — TLS traffic analysis - `certbot` — Certificate management --- ## Core Capabilities ### 1. SSL/TLS Configuration Auditing **When the user asks to audit TLS for a server or paste a TLS configuration:** **Command-line audi...