ksp security
ksp security
Command ReferenceAudit local KSP security policies, test cipher resistance, and verify replay protection sliding window parameters.
Session & Security
RFC § 16 — Security & Threat ModelPurpose
Audit local KSP security policies, test cipher resistance, and verify replay protection sliding window parameters.
Syntax
Command-line specificationbash / powershell
ksp security [SUBCOMMAND | OPTIONS]
Arguments
| Argument | Description |
|---|---|
| [SUBCOMMAND] | Audit target: `audit`, `ciphers`, or `threat-model`. |
Options & Flags
| Option Flag | Description |
|---|---|
| --check-config <PATH> | Evaluate a specific `ksp.toml` file against enterprise hardening rules. |
| --simulate-attack | Run controlled replay and nonce-reuse vulnerability simulations against your local endpoint. |
Example Usage
Example command
ksp security audit --check-config ./ksp.toml
Expected Output
════════════════════════════════════════════════════════════ ══ KSP Cryptographic Policy Audit ══ ════════════════════════════════════════════════════════════ [✔] AEAD Cipher Enforcement: Strict (No null ciphers permitted) [✔] Ephemeral Key Exchange: X25519 (Perfect Forward Secrecy verified) [✔] Sliding Replay Window: 1024-packet bitmap active [✔] Certificate Signature: Ed25519 High-Entropy Check OK [✔] Nonce Construction: Deterministic Counter + Salt OK Audit Result: PASS. Grade A+ compliant with RFC-0001 Security Best Practices.
Implementation Notes
Guarantees that your production servers are not exposed to downgrade attacks or replay window vulnerabilities.