dotnet-cryptography
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure implementation examples for hashing, encryption, and key derivation using standard .NET libraries.
- [SAFE]: Correct use of CryptographicOperations.FixedTimeEquals is demonstrated to prevent timing attacks.
- [SAFE]: Recommended key derivation parameters (PBKDF2 with 600,000 iterations) align with current OWASP standards.
- [SAFE]: The skill identifies and warns against the use of broken or deprecated algorithms such as MD5, SHA-1, and DES.
- [SAFE]: Examples for post-quantum cryptography (PQC) in .NET 10 are provided with appropriate platform support checks.
Audit Metadata