Run any Skill in Manus with one click

Get Started

crypto

Stars2

Forks1

UpdatedJanuary 10, 2026 at 05:27

Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

bentefay

bentefay/moneyflow

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.

More from this repository

same repository

components

bentefay/moneyflow

UI component patterns for React 19, shadcn/ui, and Tailwind. Use when working on files in src/components/.

2026-04-062

crdt

bentefay/moneyflow

Loro CRDT state management with loro-mirror. Use when working on files in src/lib/crdt/.

2026-04-062

e2e

bentefay/moneyflow

Playwright E2E testing patterns. Use when working on files in tests/e2e/.

2026-04-062

import

bentefay/moneyflow

CSV and OFX transaction import parsing. Use when working on files in src/lib/import/.

2026-04-062

sync

bentefay/moneyflow

Real-time sync with Supabase, Loro CRDT, and IndexedDB. Use when working on files in src/lib/sync/.

2026-04-062

trpc

bentefay/moneyflow

tRPC v11 API layer with Zod and Ed25519 auth. Use when working on files in src/server/.

2026-04-062

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.