Cryptographic Key Material Exposure

Detects private keys, certificates, and cryptographic key material hardcoded or committed in source code.

zakirkun 60a9452 2 files · 2.7 KB Updated

File contents

Cryptographic Key Material Exposure

Overview

Private keys and key material committed to version control or hardcoded in source permanently compromise:

  • TLS certificates (can intercept all encrypted traffic)
  • SSH keys (unauthorized server access)
  • JWT signing keys (forge authentication tokens)
  • PGP keys (decrypt private communications)

Remediation

  • Use .gitignore to exclude all key files
  • Rotate any exposed keys immediately — treat them as compromised
  • Use secrets management systems (Vault, AWS Secrets Manager)
  • Use hardware security modules (HSM) for production key storage

zakirkun/ice-tea/tree/main/skills/crypto/key-material-exposure commit 60a94525bd

Frequently asked questions

npx skillmds@latest add zakirkun/cryptographic-key-material-exposure