About

Imported from mukul975/anthropic-cybersecurity-skills (skills/implementing-rsa-key-pair-management/SKILL.md). Install upstream with npx skills add mukul975/anthropic-cybersecurity-skills --skill implementing-rsa-key-pair-management. Copyright stays with the author (Apache-2.0).

Implementing RSA Key Pair Management

Name: implementing-rsa-key-pair-management
Author: mukul975

Overview

RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating, and managing RSA key pairs following NIST SP 800-57 key management guidelines, including key serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation.

When to Use

When deploying or configuring implementing rsa key pair management capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with cryptography concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Generate RSA key pairs with appropriate key sizes (2048, 3072, 4096 bits)
Serialize keys in PEM and DER formats with PKCS#8
Protect private keys with strong passphrase encryption
Implement key rotation with versioning
Extract public key components and fingerprints
Validate key strength and detect weak keys
Sign and verify data using RSA-PSS

Key Concepts

RSA Key Sizes and Security Strength

Key Size (bits)	Security Strength (bits)	Recommended Until
2048	112	2030
3072	128	Beyond 2030
4096	~140	Beyond 2030

RSA Padding Schemes

Scheme	Use Case	Standard
OAEP	Encryption	PKCS#1 v2.2 (RFC 8017)
PSS	Signatures	PKCS#1 v2.2 (RFC 8017)
PKCS#1 v1.5	Legacy only	Deprecated for new systems

Key Storage Formats

PEM: Base64-encoded with headers, human-readable
DER: Binary ASN.1 encoding, compact
PKCS#8: Standard for private key encapsulation
PKCS#12/PFX: Bundled key + certificate, password-protected

Security Considerations

Minimum 3072-bit keys for new deployments (NIST recommendation)
Always protect private keys with AES-256-CBC passphrase encryption
Use RSA-PSS for signatures (not PKCS#1 v1.5)
Use RSA-OAEP for encryption (not PKCS#1 v1.5)
Store private keys with restrictive file permissions (0600)
Implement key rotation at least annually

Validation Criteria

Key generation produces valid RSA key pair
Public key can be extracted from private key
Private key is protected with passphrase
RSA-PSS signature verification succeeds
Tampered signature verification fails
Key fingerprint is computed correctly
Key rotation maintains old key access for verification

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-rsa-746210/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

mukul975-anthropic-cybersecurity-skills-implementing-rsa-746210.ocm.jsonjson

{
  "ocm": "1",
  "id": "mukul975-anthropic-cybersecurity-skills-implementing-rsa-746210",
  "kind": "skill",
  "name": "implementing-rsa-key-pair-management",
  "description": "Generates, stores, rotates, and manages RSA key pairs following NIST SP 800-57 guidelines, covering serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation. Use when creating or rotating RSA keys for signatures, key exchange, or encryption, or when auditing existing keys for proper storage and NIST-compliant strength.",
  "publisher": "mukul975",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "math"
    ],
    "tags": [
      "skill-md",
      "cryptography",
      "rsa",
      "key-management",
      "pki",
      "asymmetric-encryption",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Generates, stores, rotates, and manages RSA key pairs following NIST SP 800-57 guidelines, covering serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation. Use when creating or rotating RSA keys for signatures, key exchange, or encryption, or when auditing existing keys for proper storage and NIST-compliant strength."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills",
      "path": "skills/implementing-rsa-key-pair-management/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/implementing-rsa-key-pair-management/SKILL.md",
      "key": "mukul975/anthropic-cybersecurity-skills/skills/implementing-rsa-key-pair-management/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Implementing RSA Key Pair Management\n\n## Overview\n\nRSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating, and managing RSA key pairs following NIST SP 800-57 key management guidelines, including key serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation.\n\n\n## When to Use\n\n- When deploying or configuring implementing rsa key pair management capabilities in your environment\n- When establishing security controls al",
  "cost": {
    "context_tokens": 747
  }
}

Fetch it by URL: GET /api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-rsa-746210/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.