Advanced › Module 5 › Lesson 4
Lab — Modern
Pack AES modes, RSA toy, and openssl CLI cards — modern toy crypto file from $CRYPTO_LAB only.
Visual · t28_modern_lab
Lab: modern toy pack. $CRYPTO_LAB only. Original Cyberlium.
Opening
Modern pack merges AEAD demos and toy RSA — paperwork before PKI module.
Lessons 5-1–5-3 named AES modes, RSA toy math, and openssl CLI. This lab merges three cards with M2 primitives cross-reference and explicit no-production-break language. Optional: run one AES-GCM enc/dec cycle on YOUR file — log command and UTC only; no stranger keys. Next: Quiz — Modern Toy Crypto.
1. Lab contract: modern toy pack
Create $HOME/cyberlium-lab/t28-m05-l04-modern-lab.txt merging AES modes, RSA toy, and openssl CLI sections with $CRYPTO_LAB key paths and M1 ethics cross-reference.
Optional: one redacted openssl command line from YOUR demo — no -pass or key material in notes.
Command guide
Try these commands — Lab contract: modern toy pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Optional command
OpenSSL rsa — https://www.openssl.org/docs/manmaster/man1/openssl-rsa.html
NIST key storage — https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final Let's Encrypt — https://letsencrypt.org/docs/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install openssl
macOS: Built-in
Windows:
Command — copy this
choco install openssl
═══ LINUX / macOS ═══
Command — copy this
export CRYPTO_LAB=${CRYPTO_LAB:-$HOME/cyberlium-lab/t28-crypto}
openssl rsa -in "$CRYPTO_LAB/keys/lab-toy-2048.pem" -noout -text | head -12
cat > "$CRYPTO_LAB/notes/never-publish-keys.txt" <<'EOF'
NEVER publish private keys (.pem with PRIVATE KEY header)
NEVER commit keys to git, paste in chat, or upload to public repos
lab keys: chmod 600, stay in $HOME/cyberlium-lab/t28-crypto/keys/
production: HSM/KMS/vault — not plaintext on disk
EOFCommand — copy this
grep -E 'NEVER|chmod 600' "$CRYPTO_LAB/notes/never-publish-keys.txt" ls -la "$CRYPTO_LAB/keys/"
═══ WINDOWS ═══
Command — copy this
openssl rsa -in $HOME/cyberlium-lab/t28-crypto/keys/lab-toy-2048.pem -noout -text | Select-Object -First 8 Get-Content $HOME/cyberlium-lab/t28-crypto/notes/never-publish-keys.txt | Select-String NEVER
Primary tools to practice this lesson: openssl, grep. Reference sites: OpenSSL rsa (https://www.openssl.org/docs/manmaster/man1/openssl-rsa.html); NIST key storage (https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final); Let's Encrypt (https://letsencrypt.org/docs/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check ethics
Grep for production modulus, oracle script, stranger PEM paths — remove. Pack must label RSA section EDUCATIONAL TOY ONLY.
Confirm AES demo uses GCM or notes ECB risk explicitly.
3. Lock the proof
chmod 600 on the pack and any generated key files. Quiz next — then PKI Literacy in M6.
Modern toy literacy feeds certificate lifecycle lessons next module.
4. What you ship: modern toy crypto pack for $CRYPTO_LAB
Merged AES, RSA toy, openssl sections. $CRYPTO_LAB named. NO production breaks. chmod 600.
5. What you record before the next lesson
Date. Modern pack path. $CRYPTO_LAB named. File t28-m05-l04-modern-lab.txt chmod 600.
6. Wrong vs right: prod crypto oracles vs CTF toys
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include production TLS key in pack. Skip RSA EDUCATIONAL label.
Right
Write YOUR modern toy pack for $CRYPTO_LAB. chmod 600. Next: Quiz — Modern Toy Crypto.
Mission: freeze YOUR modern toy pack
1) Merge M5 literacy sections. 2) Confirm RSA toy label present. 3) Link M2 primitives cross-ref. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Delete any accidental real PEM from pack before quiz — regenerate toy keys if unsure.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Modern pack must label RSA section as educational toy only.
True or False
Knowledge Check
APPLY: openssl in modern pack is:
Multiple choice