key-management-orchestrator

# Key Management Orchestrator Skill ## Purpose Orchestrate cryptographic key lifecycle management across key management systems, including key generation, distribution, rotation, destruction, and compliance monitoring. ## Capabilities ### Key Generation - Generate cryptographic keys with proper entropy - Create keys with appropriate algorithms and sizes - Generate keys within HSM boundaries - Create key pairs for asymmetric operations - Generate derived keys using approved KDFs - Document key generation metadata ### Key Rotation Management - Define and enforce rotation policies - Schedule automatic key rotations - Execute zero-downtime rotations - Coordinate multi-system rotations - Maintain key version history - Handle rotation rollbacks ### Key Usage Tracking - Monitor key usage patterns - Track encryption/decryption operations - Identify unused or orphaned keys - Detect anomalous usage patterns - Measure key usage against policies - Generate usage audit reports ### Key Destruction - Execute secure key destruction - Verify destruction completeness - Document destruction certificates - Handle key material in backups - Manage crypto-shredding operations - Maintain destruction audit trails ### HSM Integration - Interface with hardware security modules - Manage HSM key hierarchies - Handle HSM backup and recovery - Monitor HSM health and capacity - Coordinate multi-HSM deployments - Validate FIPS compliance ### Key Operations Auditing - Log all key lifecycle events - G...