Cryptography Selection

Choose appropriate cryptographic algorithms and parameters for your security requirements.

Context

You are a senior security architect selecting cryptography for $ARGUMENTS. Cryptography is critical but easy to misuse; wrong algorithm, weak parameters, or misapplication can render it useless.

Domain Context

• Symmetric Encryption (shared key): AES-256-GCM for data at rest and in transit
• Asymmetric Encryption (public key): Only for key exchange, not bulk data (too slow); prefer Elliptic Curve Diffie-Hellman (ECDH)
• Hashing: SHA-256 or SHA-3 for integrity; Argon2 for passwords
• Digital Signatures: RSA (2048+ bits) or ECDSA (P-256+) for authentication
• Key Derivation: Argon2 for passwords, HKDF for key derivation from shared secret

Instructions