crypto-asymmetric-rsa · DCx7C5 - Agent Skill

01 前言 Front Matter

name: crypto-asymmetric-rsa
domain: cybersecurity
description: -| | OAEP | Encryption | PKCS#1 v2.2 (RFC 8017) | | PSS | Signatures | PKCS#1 v2.

02 资源文件 1

参考文档index.json548 B

03 SKILL.md 正文

Key Storage Formats

PEM: Base64-encoded with headers, human-readable
DER: Binary ASN.1 encoding, compact
PKCS#8: Standard for private key encapsulation
PKCS#12/PFX: Bundled key + certificate, password-protected

Security Considerations

Minimum 3072-bit keys for new deployments (NIST recommendation)
Always protect private keys with AES-256-CBC passphrase encryption
Use RSA-PSS for signatures (not PKCS#1 v1.5)
Use RSA-OAEP for encryption (not PKCS#1 v1.5)
Store private keys with restrictive file permissions (0600)
Implement key rotation at least annually

Validation Criteria

[ ] Key generation produces valid RSA key pair
[ ] Public key can be extracted from private key
[ ] Private key is protected with passphrase
[ ] RSA-PSS signature verification succeeds
[ ] Tampered signature verification fails
[ ] Key fingerprint is computed correctly
[ ] Key rotation maintains old key access for verification

04 同仓库更多 Skills

DCx7C5/ai-marketplace

services-wmi-persistence-detect

Detect WMI event subscription persistence by enumerating ActiveScriptEventConsumer, CommandLineEventConsumer, and permanent subscriptions in the WMI repository.

★ 0

DCx7C5/ai-marketplace

services-wmi-exec-exploit

Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.

★ 0

DCx7C5/ai-marketplace

registry-artifact-extract

Extract and analyze Windows Registry hives to uncover user activity, installed software, autostart entries, and evidence of system compromise.

★ 0

DCx7C5/ai-marketplace

processes-token-impersonate-detect

Detect Windows token impersonation and privilege abuse including SeImpersonatePrivilege exploitation via Potato attacks and token stealing techniques.

★ 0

DCx7C5/ai-marketplace

processes-thread-injection-detect

Detect Windows thread injection techniques including CreateRemoteThread, QueueUserAPC, NtCreateThreadEx, and thread hijacking via process memory analysis.

★ 0

DCx7C5/ai-marketplace

processes-hollow-technique-detect

Detect process hollowing (RunPE) by identifying processes with mismatched image paths between PEB and VAD tree, or unmapped PE headers in memory.

★ 0