원클릭으로 Manus에서 모든 스킬 실행

시작하기

crypto

스타2

포크1

업데이트2026년 1월 10일 05:27

Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

bentefay

bentefay/moneyflow

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.

이 저장소의 다른 Skills

같은 저장소

components

bentefay/moneyflow

UI component patterns for React 19, shadcn/ui, and Tailwind. Use when working on files in src/components/.

2026-04-062

crdt

bentefay/moneyflow

Loro CRDT state management with loro-mirror. Use when working on files in src/lib/crdt/.

2026-04-062

e2e

bentefay/moneyflow

Playwright E2E testing patterns. Use when working on files in tests/e2e/.

2026-04-062

import

bentefay/moneyflow

CSV and OFX transaction import parsing. Use when working on files in src/lib/import/.

2026-04-062

sync

bentefay/moneyflow

Real-time sync with Supabase, Loro CRDT, and IndexedDB. Use when working on files in src/lib/sync/.

2026-04-062

trpc

bentefay/moneyflow

tRPC v11 API layer with Zod and Ed25519 auth. Use when working on files in src/server/.

2026-04-062

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.