Advanced › Module 10 › Lesson 1
Checklist
Topic 28 capstone checklist — crypto mindset, primitives, PKI/TLS, keys, reporting on $CRYPTO_LAB.
Visual · t28_capstone_checklist
Checklist consolidates advanced crypto literacy pillars. $CRYPTO_LAB only. Original Cyberlium.
Opening
Capstone proves crypto literacy on YOUR authorized lab work — not a portfolio of prod oracle exploits.
Assemble checklist covering Modules 1–9: crypto mindset and lab toys, primitives literacy, attack classes named (toys only), classic/modern CTF labs, PKI/TLS hygiene, CSPRNG/key storage/rotation, crypto findings and libraries-not-DIY, responsible disclosure. Use on capstone walk of YOUR $CRYPTO_LAB — never prod padding-oracle, forged CA, MITM banking TLS, DIY ciphers, or key dumps. Each row links artifact or honest N/A. Notes chmod 600 under $HOME/cyberlium-lab. Integrity rows: $CRYPTO_LAB only, RoE stated, findings evidenced, limitations documented, libraries-not-DIY enforced.
1. Scope and ethics
$CRYPTO_LAB named with RoE reference. NEVER prod oracles, NEVER forged CA, NEVER MITM unauthorized TLS, NEVER DIY crypto, NEVER key dumps.
example.com openssl read labeled public literacy — separate from toy CTF evidence.
Command guide
Try these commands — Scope and ethics
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Optional command
OpenSSL — https://www.openssl.org/
NIST SP 800-57 — https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final Cryptopals — https://cryptopals.com/ CWE — https://cwe.mitre.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export CRYPTO_LAB=${CRYPTO_LAB:-$HOME/cyberlium-lab/t28-crypto}
cat > "$CRYPTO_LAB/notes/capstone-checklist.txt" <<'EOF'
[ ] lab.env + data/ keys/ certs/ notes/ report/ dirs
[ ] roe.txt + no-live-attacks.txt reviewed
[ ] demo.txt hashed (openssl dgst + sha256sum)
[ ] demo.enc encrypted/decrypted (aes-256-cbc -pbkdf2)
[ ] named-attacks-literacy + CWE pages curled
[ ] Caesar/Vigenere/XOR python on YOUR strings
[ ] lab-toy-2048.pem + TOY RSA (p=61,q=53) — never publish keys
[ ] lab-selfsigned.crt + crt.sh/CT docs curled
[ ] s_client example.com TLS literacy
[ ] openssl rand -hex 32 + key storage notes
[ ] finding draft + report template + severity matrix
[ ] never: padding-oracle live / production RSA / JWT alg=none abuse
EOFCommand — copy this
grep '\[ \]' "$CRYPTO_LAB/notes/capstone-checklist.txt"
python3 -c "print('Capstone: crypto literacy — YOUR t28-crypto lab only')"Primary tools to practice this lesson: grep, python3. Reference sites: OpenSSL (https://www.openssl.org/); NIST SP 800-57 (https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final); Cryptopals (https://cryptopals.com/); CWE (https://cwe.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy pillars
Mindset, primitives, attack classes, CTF labs, PKI/TLS, keys/RNG, reporting — linked rows.
Cross-link Topic 27 mobile only as separate track — do not mix pinning bypass into crypto pack.
3. Teardown
Notes secured chmod 600, report pack ready, lab toy snapshot revert optional per brief.
Archive retention note for mentor handoff.
4. What you ship: Topic 28 capstone checklist
One-page advanced crypto literacy capstone checklist for $CRYPTO_LAB.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: prod crypto oracles vs CTF toys
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Checklist includes row 'padding-oracle on live bank for bonus.'
Right
Checklist written. Next: Lab Path.
Mission: write capstone checklist
1) Ethics/scope section. 2) Modules 1–9 pillar rows. 3) Teardown and handoff section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone artifacts?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Prod crypto attacks required for capstone.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice