Crypto Keys

local

crypto-keys-tools

Generate RSA / ECDSA keypairs, sign & verify messages, and compute HMAC signatures (constant-time verify).

Included in every Nova Skills API key. Nothing to install — get a bearer token and this skill is available on your MCP endpoint.

Tools (6)

  • crypto_gen_rsa
    Generate an RSA keypair in PEM format. Sizes: 2048 (fast, standard) or 4096 (stronger, slower).
  • crypto_gen_ecdsa
    Generate an ECDSA keypair (elliptic curve). Curves: prime256v1 (default), secp384r1, secp521r1.
  • crypto_sign
    Sign a message with an RSA or ECDSA PEM private key using SHA-256. Returns base64 signature.
  • crypto_verify
    Verify a base64 signature against a message using an RSA or ECDSA PEM public key.
  • crypto_hmac
    Compute an HMAC over a message. Supports sha256, sha1, sha512, md5.
  • crypto_hmac_verify
    Constant-time verify an HMAC. Compares a provided signature against the expected HMAC of the message.