Results for “data-encryption-key”

Persists app data on Android using Room, SQLite, SharedPreferences, DataStore, and encryption.

The central pattern.

Implement AES-256-GCM encryption for files and data at rest, including key derivation, IV management, and authenticated encryption.

Implements a simplified version of the Signal Protocol's Double Ratchet algorithm using X25519, HKDF, and AES-256-GCM for end-to-end encrypted messaging.

Comprehensive cryptography guidance covering encryption algorithms, password hashing, TLS configuration, key management, and post-quantum considerations. Use when implementing encryption, choosing hashing algorithms, configuring TLS/SSL, managing cryptographic keys, or reviewing cryptographic implementations.

Provides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.

Identify sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.

Store and retrieve API keys, passwords, and credentials in an HSM-backed encrypted vault via MCP or REST API, with policy-based access control, secret rotation, multi-chain signing, and prompt injection scanning.

API Keys

Inventory cryptographic assets, deploy hybrid X25519 and ML-KEM key exchange, and prioritize migration of harvest-now-decrypt-later data.

Implements security-sensitive changes with conservative trust boundaries, secret protection, tests, and verification.

GPG (GNU Privacy Guard) encryption and signing reference. Covers key generation (Ed25519/RSA), export/import, keyservers, file encryption (symmetric + asymmetric), git commit signing, detached signatures, gpg-agent caching, SSH via GPG, and pass password manager.

Encrypts Windows endpoints using Microsoft BitLocker to protect data at rest, covering TPM configuration, GPO settings, Intune deployment, and recovery key management for compliance requirements.

Use when tenant data protection, data privacy compliance, data encryption, or data governance is needed. This agent specializes in SaaS data protection within the SaaSForge AI ecosystem.

**Pattern:**

Builds AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration, and secure vsock communication for processing sensitive data.

接收加密.xls/.xlsx + 密码 → 解密 → 脱敏 → 加密输出。替换公司名/客户名/金额扰动。

End-to-end data pipeline for empirical research: fetch economic data from APIs (FRED, World Bank, IMF, BLS, OECD, Yahoo Finance), clean and transform raw data, construct strategy-specific variables, and validate panel structure. Use when asked to fetch data, download data, clean data, merge datasets, prepare analysis-ready data.

Implements layered security for Flutter apps: code obfuscation, certificate pinning, secure storage, encryption, biometric authentication, and root/jailbreak detection.

Provides a SQLite-backed persistence layer for skill execution metrics, feedback, improvement candidates, and version history, with query and maintenance workflows.

Reference for MariaDB's built-in encryption, hashing, and compression functions, covering AES_ENCRYPT/DECRYPT, SHA2, KDF, COMPRESS, and related functions, with guidance on correct usage and common pitfalls.

Secure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are never exposed in terminals, logs, traces, or Claude's context. Trigger phrases include "environment variables",...

Explains cryptographic primitives and provides Python implementations for encryption, hashing, key exchange, and digital signatures.

Analyzes cryptographic code to detect operations that leak secret data through execution timing variations, supporting multiple languages.

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation.

Implements FIDO2/WebAuthn hardware security key authentication with registration, authentication, YubiKey enrollment, and passkey migration using the python-fido2 library.

GPG (GNU Privacy Guard) encryption and signing reference. Covers key generation (Ed25519/RSA), export/import, keyservers, file encryption (symmetric + asymmetric), git commit signing, detached signatures, gpg-agent caching, SSH via GPG, and pass password manager.

Extract DPAPI-protected secrets such as credentials and browser data from Windows systems during authorized penetration tests.

Execute OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services during authorized red-team engagements.

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

age file encryption reference — the modern, simple alternative to GPG. Covers key generation, X25519 encryption, SSH key support, passphrase mode, pipe patterns, SOPS integration, YubiKey plugins, and security considerations. By Filippo Valsorda.

Provides a structured risk scoring methodology for Data Protection Impact Assessments aligned with ENISA threat taxonomy and ISO 29134. Covers likelihood and severity assessment, risk matrix construction, inherent vs residual risk calculation, and risk appetite thresholds per EDPB WP248rev.01 guidance. Keywords: risk scoring, DPIA risk matrix, likelihood, severity, ENISA, ISO 29134, residual risk, risk appetite.

Generates, stores, validates, rotates, and revokes API keys with secure hashing, scoping, rate limiting, and leak monitoring.

Provides a security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data handling.

List all keys in the Custodian KV store with optional prefix