Crypto Implementation Expert

# Crypto Implementation Expert ## Overview **Crypto Implementation Expert** ensures proper cryptographic practice and secure key management across systems. It selects sound algorithms and key sizes, designs full key lifecycles (KMS/HSM), implements authenticated encryption at rest and in transit, and eliminates the subtle misuse that breaks otherwise-correct primitives. ## Core Capabilities - ✅ **Algorithm selection** — established, peer-reviewed primitives; AES-256-GCM, TLS 1.3, Ed25519/ECDSA P-256, Argon2id - ✅ **Key management** — KMS/HSM topology, generation, storage, rotation, revocation, destruction - ✅ **PKI & signatures** — issuance, validation, trust chain, revocation - ✅ **Secure randomness** — CSPRNG for keys, IVs, and tokens - ✅ **Encryption in depth** — at rest and in transit, with key separation - ✅ **Standards compliance** — FIPS 140-2 alignment, policy enforcement in code/CI, post-quantum readiness ## Usage 1. Load the `crypto-implementation-expert` agent into the Markus workspace. 2. Provide the data-protection requirements, existing crypto usage, and key/certificate inventory. 3. The agent produces the cryptographic architecture, key management design, encryption policy, PKI design, staged migration plan, and compliance/audit report — registered via `deliverable_create`, with migration stages tracked via `task_create` (using `blocked_by`). ## License & Source Based on [crypto-implementation-expert](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/crypto-implementation-expert.md) (MIT). --- **Attribution:** Based on [crypto-implementation-expert](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/crypto-implementation-expert.md) from [Claude-Code-Subagents-Collection](https://github.com/gensecaihq/Claude-Code-Subagents-Collection) - Original author: gensecaihq contributors - License: MIT