{"uid":"cap_FtnqikowLnpDWWOExldgz","slug":"halowerk-sicherwerk-public-key-math-audit-66b1f336","name":"HALOWERK sicherwerk Public Key Math Audit","description":"Takes a public key in SubjectPublicKeyInfo PEM form and runs the pinned OpenSSL build's own consistency checks over it, then reports the algorithm, the key size in bits and the parameters it found. This catches keys that parse but are structurally unusable: a modulus that is not a valid product, curve parameters that do not match a known group, a size that no longer meets the build's security level. The reported bit count comes from the key itself, not from the label a producer attached.","url":"https://sicher.halowerk.com/v1/oss-openssl-public-key-math-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"public_key_pem":{"type":"string","maxLength":262144,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ol6QNzCVJ5PtpYZN7P9y0","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a PEM-encoded public key using a pinned OpenSSL build, reporting the algorithm, true bit size, and structural soundness of the key's cryptographic parameters.","exampleAgentPrompt":"Can you run a math audit on this public key PEM and tell me whether the algorithm, bit size, and parameters are structurally valid and meet current security levels? Here's the key: -----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...-----END PUBLIC KEY-----","exampleUseCases":[{"title":"Detecting weak or malformed RSA keys","prompt":"I have an RSA public key PEM from a vendor and I want to make sure the modulus is actually valid and the key is at least 2048 bits — can you run a structural math audit on it? Here's the PEM: -----BEGIN PUBLIC KEY-----MIIBIjAN...-----END PUBLIC KEY-----"},{"title":"Validating EC key curve parameters","prompt":"Before I use this elliptic curve public key in my TLS setup, can you verify that its curve parameters actually match a recognized named group and that the key is structurally usable? The PEM is: -----BEGIN PUBLIC KEY-----MFkwEwYHKoZIzj0CAQY...-----END PUBLIC KEY-----"},{"title":"Auditing key bit size before certificate issuance","prompt":"I need to confirm the real bit size reported by OpenSSL's own consistency checks on this public key, not just what the label says — can you audit it and tell me the algorithm and actual key size? Here's the key: -----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9...-----END PUBLIC KEY-----"}],"resultDescription":"Returns the algorithm identifier (e.g. RSA, EC, DH), the true key size in bits as reported by the key's internal structure, the cryptographic parameters found, and a structural consistency verdict — flagging any keys that parse but are unusable (invalid modulus, mismatched curve group, insufficient security level).","failureModes":["Malformed PEM input that cannot be parsed returns an error indicating invalid format","Keys with unsupported algorithms not recognized by the pinned OpenSSL build return an unsupported algorithm error","Network or service unavailability returns HTTP 5xx","Insufficient payment or missing x402 payment header returns HTTP 402","Keys exceeding the 262144-character input limit are rejected"],"whenToPreferThis":"Choose this endpoint when you need cryptographic ground-truth validation of a public key's internal structure — not just label parsing — specifically using a pinned, deterministic OpenSSL build. It is especially valuable when you need to detect keys that appear syntactically valid but are structurally unusable (bad modulus, unknown curve group, undersized key). Prefer this over general certificate validators when you have a bare public key (SubjectPublicKeyInfo PEM) rather than a full certificate, or when you need the authoritative bit count from the key internals rather than the declared label.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:33:35.620Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-public-key-math-audit-66b1f336"}