<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Implementing Network Encryption — API & Tool Reference

> Quick reference for tools, commands, and APIs used in implementing-network-encryption.

## Tools

### `openssl`

TLS testing and certificate management

**Usage:**
```bash
openssl s_client -connect host:443 -tls1_3
```

**Key Flags:**
  - `s_client: TLS client connection`
  - `-tls1_3: force TLS 1.3`
  - `-showcerts: display cert chain`
  - `x509: certificate operations`

---

### `wg`

WireGuard tunnel management

**Usage:**
```bash
wg show wg0
```

**Key Flags:**
  - `show: display tunnel status`
  - `genkey: generate private key`
  - `pubkey: derive public key`
  - `set: configure interface`

---

### `nmap`

Cipher suite enumeration

**Usage:**
```bash
nmap --script ssl-enum-ciphers -p 443 target
```

**Key Flags:**
  - `--script ssl-enum-ciphers: enumerate ciphers`
  - `-p: target port`
  - `-oX: XML output`

---

## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
