메뉴
Run a bounded, evidence-heavy cribdrag workflow for suspected keystream reuse and XOR-style leakage.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | crypto_cribdrag |
| description | Run a bounded, evidence-heavy cribdrag workflow for suspected keystream reuse and XOR-style leakage. |
| metadata | {"short-description":"Test repeated-keystream hypotheses with disciplined cribdrag artifacts"} |
This skill handles the very specific but common case where multiple ciphertexts appear to share a keystream or OTP segment. It should not be invoked as a generic “maybe XOR” reflex. It exists to transform that suspicion into structured evidence.
artifacts/out/validation/High-value crib sources include:
Low-value cribs include generic English words with weak structural constraints. Prefer cribs that also constrain alignment and character class plausibility.
Pass only if the skill leaves enough evidence to justify why repeated-keystream confidence increased, decreased, or stayed inconclusive.
Enforce artifact-contract, presence, dependency, freshness, and cross-reference correctness for the artifact graph.
Reuse prior work only when hashes, dependencies, and artifact semantics still support it.
Normalize remote configuration and connection hints into machine-readable, ambiguity-aware remote artifacts.
Drive decode-first problems through explicit candidate generation, convergence tests, and branch stop conditions.
Map mixed decode-plus-crypto chains into explicit stages, transitions, and evidence-backed branch routes.
Build explicit vulnerability hypotheses with preconditions, discriminators, costs, scores, and attack-family context.