Cryptography Best Practices Skill

Purpose

This skill provides guidance on implementing cryptography correctly in the CIA platform, covering encryption, hashing, digital signatures, and key management. It ensures compliance with NIST, OWASP, and Hack23 ISMS cryptography policies.

When to Use This Skill

Apply this skill when:

• ✅ Encrypting sensitive data at rest (database, files)
• ✅ Implementing user authentication (password hashing)
• ✅ Securing data in transit (TLS configuration)
• ✅ Generating secure tokens or session IDs
• ✅ Implementing digital signatures
• ✅ Creating API authentication mechanisms
• ✅ Managing encryption keys

Golden Rules of Cryptography