# Micro Ecc Integration

> Use when integrating, porting, configuring, or debugging micro-ecc ECDH, ECDSA, elliptic-curve keys, RNG, signatures, or embedded ECC operations

- **Type:** Skill
- **Install:** `agentstack add skill-easyzoom-aix-skills-micro-ecc-integration`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [easyzoom](https://agentstack.voostack.com/s/easyzoom)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [easyzoom](https://github.com/easyzoom)
- **Source:** https://github.com/easyzoom/aix-skills/tree/main/skills/micro-ecc-integration
- **Website:** https://github.com/easyzoom/aix-skills

## Install

```sh
agentstack add skill-easyzoom-aix-skills-micro-ecc-integration
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# micro-ecc Integration

## Overview

Use this skill to integrate micro-ecc by treating randomness, key storage, curve choice, and test vectors as security-critical. ECC that compiles but uses weak RNG or mismatched key formats is not working.

## When To Use

Use this skill when:

- The user wants ECDH, ECDSA, public/private key generation, signature verification, or ECC on an MCU using micro-ecc.
- The issue involves bad signatures, key mismatch, RNG, curve selection, endian/format mismatch, or slow scalar multiplication.

Do not use this skill for full TLS stacks. Use `mbedtls-integration` for TLS. For AES/SHA/HMAC primitives, use `tinycrypt-integration`.

## First Questions

Ask for:

- Curve, operation, and protocol using ECC.
- Target MCU, compiler, and whether hardware TRNG/crypto exists.
- RNG source and key storage policy.
- Public/private key byte format and endian expectations.
- Test vector, signature, or verification failure details.

## Integration Checklist

1. Choose curve deliberately.
   Match peer requirements and security level.

1. Provide real RNG.
   Key generation and ECDSA require strong randomness. Do not use pseudo-random test stubs in production.

1. Verify key formats.
   Public key layout, private key length, endian, and compressed/uncompressed format must match protocol.

1. Run known test vectors.
   Validate sign/verify or shared-secret derivation against expected data.

1. Protect secrets.
   Do not log private keys, nonces, or raw secrets.

## Common Failures

- Weak or deterministic RNG used in production.
- Public key format mismatches peer protocol.
- Curve mismatch between device and server.
- Signature verification uses hashed versus unhashed data inconsistently.
- Stack buffers expose private key material in logs or dumps.

## Verification

Before claiming micro-ecc works:

- State curve, operation, key format, and RNG source.
- Confirm known test vectors pass.
- Confirm negative verification fails for modified data.
- Confirm secrets are not logged and storage policy is explicit.

## Example

User:

```text
micro-ecc 签名服务器验不过。
```

Agent:

1. Asks for curve, key format, hash/sign input, RNG, and server expected format.
1. Checks endian and hashed-versus-raw message handling.
1. Verifies with known vectors before changing protocol code.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [easyzoom](https://github.com/easyzoom)
- **Source:** [easyzoom/aix-skills](https://github.com/easyzoom/aix-skills)
- **License:** MIT
- **Homepage:** https://github.com/easyzoom/aix-skills

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-easyzoom-aix-skills-micro-ecc-integration
- Seller: https://agentstack.voostack.com/s/easyzoom
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.