wycheproof
Cryptographic test vectors for verifying implementations against known attacks like padding oracles and forgery.
Install
npx skills add https://github.com/trailofbits/skills --skill wycheproofStats
| Total installs | 1,168 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Covers symmetric encryption (AES-GCM, ChaCha20-Poly1305), signatures (ECDSA, EdDSA, RSA), key exchange (ECDH, X25519), and hashing algorithms across multiple curves
- Test vectors organized by algorithm with shared attributes (tcId, comment, flags, result) plus algorithm-specific fields; results marked as valid, invalid, or acceptable
- Detects signature malleability, invalid DER encoding, invalid curve attacks, padding oracles, and tag forgery vulnerabilities
- Includes reference harnesses for Python (pytest) and JavaScript (Mocha) with examples for parsing JSON, filtering test groups, and parameterized testing; integrates via git submodule or direct file fetch
Tags
Related skills
| Skill | Installs | vs wycheproof |
|---|---|---|
| ghost-scan-code | 1,081 | -87 |
| semgrep-rule-variant-creator | 1,159 | -9 |
| address-sanitizer | 1,190 | +22 |
| atheris | 1,168 | = |
| monitoring-operations | 1,223 | +55 |
FAQ
- How many installs does wycheproof have?
- wycheproof has 1,168 total installs and 1.2K installs this week.
- Where is wycheproof hosted?
- wycheproof is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does wycheproof have?
- wycheproof has 4.0K GitHub stars.
- When was wycheproof first indexed?
- OrangeBot.AI first indexed wycheproof on Jan 19, 2026.
- How do I install wycheproof?
- Run: npx skills add https://github.com/trailofbits/skills --skill wycheproof