RSA Key Pair Management
FreeSecurely manage RSA key pairs with NIST compliance.
Free · Opens the source repo
What RSA Key Pair Management does
The RSA Key Pair Management skill provides a comprehensive solution for generating, storing, rotating, and managing RSA key pairs in accordance with NIST SP 800-57 guidelines. This skill is essential for developers and security professionals who need to implement strong cryptographic practices in their applications. It supports various key sizes (2048, 3072, and 4096 bits) and serialization formats such as PEM, DER, and PKCS#8, ensuring flexibility in how keys are handled and stored.
Key features include the ability to protect private keys with strong passphrase encryption, validate key strength, and implement key rotation with versioning. The skill also allows for the extraction of public key components and fingerprints, which are crucial for verifying signatures and ensuring the integrity of encrypted data. By adhering to established cryptographic standards, this skill helps ensure that your key management practices are robust and compliant with industry best practices.
This skill is particularly useful in environments where security is paramount, such as financial services, healthcare, and any application that requires secure data transmission. It is designed for users who already have a foundational understanding of cryptography and seek to enhance their security architecture with reliable RSA key management processes. Whether you're creating new keys or auditing existing ones, this skill provides the necessary tools to maintain high security standards.
In summary, the RSA Key Pair Management skill is a vital tool for anyone involved in cryptographic operations, offering both the functionality and compliance needed to manage RSA keys effectively. It is a practical addition to any developer's toolkit when building secure applications or conducting security assessments.
When to use it
Use this skill when implementing RSA key management in your applications or when conducting security assessments that require proper key handling.
When not to use it
This skill may not be suitable for users without a basic understanding of cryptography or those looking for a simple key generation tool without management capabilities.
What you can build with it
Generating New RSA Keys
Use this skill to generate new RSA key pairs with specified sizes, ensuring they meet security standards.
Auditing Existing Keys
Conduct security assessments on existing RSA keys to verify their strength and compliance with NIST guidelines.
Implementing Key Rotation
Utilize the skill to manage key rotation processes, maintaining access to old keys while ensuring new keys are securely implemented.
How to install RSA Key Pair Management
View source1. Install with the skills CLI
npx skills add mukul975/anthropic-cybersecurity-skills/implementing-rsa-key-pair-management --agent claude-code2. Or install it manually
Download the skill folder and drop it into ~/.claude/skills/ for all projects, or .claude/skills/ to scope it to one repo. Restart Claude Code so it picks up the new skill.
Anthropic's agentic coding CLI, and the reference implementation of Agent Skills. Drop a skill folder into ~/.claude/skills and Claude Code loads it automatically whenever a task matches the skill's description. Claude Code docs
Inside SKILL.md
Written by mukul975Implementing RSA Key Pair Management
Overview
RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating, and managing RSA key pairs following NIST SP 800-57 key management guidelines, including key serialization formats (PEM, DER, PKCS#8), passphrase protection, and key strength validation.
When to Use
- When deploying or configuring implementing rsa key pair management capabilities in your environment
- When establishing security controls aligned to compliance requirements
- When building or improving security architecture for this domain
- When conducting security assessments that require this implementation
Prerequisites
- Familiarity with cryptography concepts and tools
- Access to a test or lab environment for safe execution
- Python 3.8+ with required dependencies installed
- Appropriate authorization for any testing activities
Objectives
- Generate RSA key pairs with appropriate key sizes (2048, 3072, 4096 bits)
- Serialize keys in PEM and DER formats with PKCS#8
- Protect private keys with strong passphrase encryption
- Implement key rotation with versioning
- Extract public key components and fingerprints
- Validate key strength and detect weak keys
- Sign and verify data using RSA-PSS
Key Concepts
RSA Key Sizes and Security Strength
| Key Size (bits) | Security Strength (bits) | Recommended Until |
|---|---|---|
| 2048 | 112 | 2030 |
| 3072 | 128 | Beyond 2030 |
| 4096 | ~140 | Beyond 2030 |
RSA Padding Schemes
| Scheme | Use Case | Standard |
|---|---|---|
| OAEP | Encryption | PKCS#1 v2.2 (RFC 8017) |
| PSS | Signatures | PKCS#1 v2.2 (RFC 8017) |
| PKCS#1 v1.5 | Legacy only | Deprecated for new systems |
Key Storage Formats
- PEM: Base64-encoded with headers, human-readable
- DER: Binary ASN.1 encoding, compact
- PKCS#8: Standard for private key encapsulation
- PKCS#12/PFX: Bundled key + certificate, password-protected
Security Considerations
- Minimum 3072-bit keys for new deployments (NIST recommendation)
- Always protect private keys with AES-256-CBC passphrase encryption
- Use RSA-PSS for signatures (not PKCS#1 v1.5)
- Use RSA-OAEP for encryption (not PKCS#1 v1.5)
- Store private keys with restrictive file permissions (0600)
- Implement key rotation at least annually
Validation Criteria
- Key generation produces valid RSA key pair
- Public key can be extracted from private key
- Private key is protected with passphrase
- RSA-PSS signature verification succeeds
- Tampered signature verification fails
- Key fingerprint is computed correctly
- Key rotation maintains old key access for verification
Frequently asked questions about RSA Key Pair Management
Similar skills
Secret Scanning
Protect your code by preventing secret leaks.
MCP Security Audit
Ensure your MCP configurations are secure and compliant.
iMessage Access Management
Control access to your iMessage channel securely.
Implementing Secret Scanning with Gitleaks
Automate detection of hardcoded secrets in git repositories.
Secrets Vault Manager
Manage and secure your secret infrastructure efficiently.
AWS Secrets Manager
Safely manage secrets without exposing plaintext values.