Cryptography Skill

Purpose

This skill enforces cryptographic requirements as defined in the Hack23 ISMS Cryptographic Controls Policy. It ensures that all cryptographic operations use approved algorithms and follow best practices for key management.

Rules

Approved Algorithms

Symmetric Encryption - MUST USE:

• AES-256 (Advanced Encryption Standard, 256-bit key)
• AES-128 (minimum, prefer AES-256)
• ChaCha20-Poly1305 (for authenticated encryption)

Asymmetric Encryption - MUST USE:

• RSA-2048 or higher (minimum 2048-bit key, prefer 3072 or 4096)
• ECDSA with P-256, P-384, or P-521 curves
• Ed25519 (EdDSA with Curve25519)