Crypto Review

Purpose

Review cryptographic implementations for algorithm choice correctness, key management soundness, side-channel resistance, and crypto agility readiness.

Scope Constraints

Reads source code, configuration files, and documentation for cryptographic implementation analysis. Does not modify files or execute code. Does not access key material, HSMs, or cryptographic secrets directly.

Inputs

• System or component using cryptographic operations
• Cryptographic algorithms and modes in use
• Key management architecture (generation, storage, rotation, destruction)
• Data sensitivity classification and compliance requirements
• Performance constraints and target platforms

Input Sanitization

No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.