Cryptographic Key Material Exposure

Detects private keys, certificates, and cryptographic key material hardcoded or committed in source code.

zakirkun Updated

File contents

Cryptographic Key Material Exposure

Overview

Private keys and key material committed to version control or hardcoded in source permanently compromise:

  • TLS certificates (can intercept all encrypted traffic)
  • SSH keys (unauthorized server access)
  • JWT signing keys (forge authentication tokens)
  • PGP keys (decrypt private communications)

Remediation

  • Use .gitignore to exclude all key files
  • Rotate any exposed keys immediately — treat them as compromised
  • Use secrets management systems (Vault, AWS Secrets Manager)
  • Use hardware security modules (HSM) for production key storage

zakirkun/ice-tea/tree/main/skills/crypto/key-material-exposure commit 60a94525bd

Frequently asked questions

npx skillmds@latest add zakirkun/cryptographic-key-material-exposure