<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Cryptographic Compliance Audit

## Compliance Standards

### FIPS 140-3 Approved Algorithms

| Category | Approved |
|---|---|
| Symmetric | AES (128/192/256) |
| Hash | SHA-2 family, SHA-3 family |
| Signature | RSA (2048+), ECDSA (P-256+), EdDSA |
| Key Exchange | ECDH, DH (2048+) |
| MAC | HMAC, CMAC, GMAC |

### PCI DSS 4.0 Key Requirements

| Requirement | Description |
|---|---|
| 3.5 | PAN rendered unreadable (encryption or hashing) |
| 3.6 | Key management procedures documented |
| 4.2.1 | Strong cryptography for PAN in transit |
| 4.2.2 | PAN secured with strong cryptography at rest |

### NIST SP 800-131A Status

| Algorithm | Status |
|---|---|
| SHA-1 (signatures) | Disallowed |
| RSA < 2048 | Disallowed |
| 3DES | Deprecated |
| MD5 | Disallowed |

## Agent Script

```bash
node agent.js scan example.com -p 443
node agent.js key-sizes example.com
node agent.js permissions /etc/ssl
node agent.js fips
node agent.js code-scan ./src
```
