KSP — Kush Secure Protocol

Session & Security

RFC § 16 — Security & Threat Model

Purpose

Audit local KSP security policies, test cipher resistance, and verify replay protection sliding window parameters.

Syntax

Command-line specification

bash / powershell

ksp security [SUBCOMMAND | OPTIONS]

Arguments

Argument	Description
[SUBCOMMAND]	Audit target: `audit`, `ciphers`, or `threat-model`.

Options & Flags

Option Flag	Description
--check-config <PATH>	Evaluate a specific `ksp.toml` file against enterprise hardening rules.
--simulate-attack	Run controlled replay and nonce-reuse vulnerability simulations against your local endpoint.

Example Usage

Example command

ksp security audit --check-config ./ksp.toml

Expected Output

════════════════════════════════════════════════════════════
══            KSP Cryptographic Policy Audit              ══
════════════════════════════════════════════════════════════
  [✔] AEAD Cipher Enforcement:    Strict (No null ciphers permitted)
  [✔] Ephemeral Key Exchange:     X25519 (Perfect Forward Secrecy verified)
  [✔] Sliding Replay Window:      1024-packet bitmap active
  [✔] Certificate Signature:      Ed25519 High-Entropy Check OK
  [✔] Nonce Construction:         Deterministic Counter + Salt OK

  Audit Result: PASS. Grade A+ compliant with RFC-0001 Security Best Practices.

Implementation Notes

Guarantees that your production servers are not exposed to downgrade attacks or replay window vulnerabilities.

Related CommandsView All 50 Commands →

ksp cert

ksp doctor

CLI Installation Guide· Quick Start Workflow· GitHub Source Repository