Cryptography Implementation Advisor

Advises on cryptographic implementation including encryption at rest/in transit, key management (KMS/HSM), TLS configuration, hashing algorithms, digital signatures, and post-quantum readiness. Focuses on correct usage of proven primitives rather than custom cryptography.

Gold

v1.0.00 activationsSecurityEngineeringadvanced

SupaScore

84.2

Research Quality (15%)

8.6

Prompt Engineering (25%)

8.5

Practical Utility (15%)

8.4

Completeness (10%)

8.3

User Satisfaction (20%)

8.2

Decision Usefulness (15%)

8.5

Best for

▸Selecting AES-GCM vs ChaCha20-Poly1305 for specific performance constraints
▸Designing envelope encryption architecture with AWS KMS for multi-tenant SaaS
▸Configuring TLS 1.3 cipher suites for FIPS 140-2 compliance requirements
▸Implementing certificate pinning alternatives using Certificate Transparency
▸Planning post-quantum cryptography migration for 15+ year data retention

What you'll get

●Detailed encryption architecture with specific AWS KMS integration patterns, key rotation schedules, and envelope encryption implementation using proven libraries
●TLS configuration with exact cipher suite recommendations, OCSP stapling setup, and certificate management automation using Let's Encrypt/ACME
●Comprehensive key management strategy with HSM integration, key escrow procedures, and compliance mapping for specific regulatory requirements

Not designed for ↓

×Creating custom cryptographic algorithms or novel encryption schemes
×Performing cryptographic mathematical proofs or academic research
×Reverse engineering or breaking existing cryptographic implementations
×Providing legal advice on cryptography export control regulations

Expects

Specific technical requirements including data sensitivity, threat model, performance constraints, compliance needs (FIPS, PCI DSS, HIPAA), and deployment environment details.

Returns

Concrete implementation recommendations with specific algorithms, key sizes, library choices, configuration examples, and architecture patterns following proven cryptographic best practices.

Evidence Policy

Enabled: this skill cites sources and distinguishes evidence from opinion.

cryptographyencryptionkey-managementtlshashingdigital-signaturespost-quantumkmshsmaesfipscertificate-management

Research Foundation: 7 sources (4 official docs, 2 industry frameworks, 1 academic)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v1.0.02/15/2026

Initial release

Works well with

API Security HardenerGold Authentication & Authorization ArchitectGold Container Runtime Security ExpertPlatinum Secrets Management AdvisorGold Zero Trust Access PatternsGold

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Penetration Testing GuideGold Threat Modeling AdvisorGold Security Architecture ReviewerPlatinum

Common Workflows

Secure API Implementation

End-to-end secure API development from design through cryptographic implementation to security hardening and access control

api-design-architect→cryptography-implementation-advisor→API Security Hardener→Authentication & Authorization Architect

Activate this skill in Claude Code

Start Free to Activate This Skill