Skip to content
#2696 Overall#371 in DevOpsVerified SKILL.md

Doca Aes Gcm

Use this skill when the user is doing hands-on DOCA AES-GCM work on a BlueField DPU or ConnectX NIC — configuring `doca_aes_gcm_task_encrypt` / `_task_decrypt`, querying `doca_aes_gcm_cap_*` for per-key-type (only `DOCA_AES_GCM_KEY_128` / `_256` — AES-192 not supported) and per-task support, sizing plaintext against the max-buf cap, setting source / destination mmap permissions, validating with a NIST GCMVS or RFC 5288 vector, or debugging DOCA_ERROR_* including the security-critical tag-verification-failed outcome on decrypt. Trigger even when the user does not explicitly mention "DOCA AES-GCM" or "AEAD" — typical implicit phrasings: "decrypt completion IO_FAILED", "auth tag isn't verifying", "NOT_PERMITTED on my encrypt buffer", "is AES-192-GCM on this BlueField" (no), or "encrypted record came back tampered". Refuse and route elsewhere for non-GCM AES modes (CBC / CTR / XTS — CPU OpenSSL), key management (KMS / HSM / rotation), SHA (doca-sha), or general AEAD background.

Claude CodeCodexSKILL.md Official publisher
0Total downloads
0Active installs
3,046Community stars
Momentum rank

Overview

What It Does

Doca Aes Gcm packages a focused devops & cloud workflow for an AI agent. Use this skill when the user is doing hands-on DOCA AES-GCM work on a BlueField DPU or ConnectX NIC — configuring `doca_aes_gcm_task_encrypt` / `_task_decrypt`, querying `doca_aes_gcm_cap_*` for per-key-type (only `DOCA_AES_GCM_KEY_128` / `_256` — AES-192 not supported) and per-task support, sizing plaintext against the max-buf cap, setting source / destination mmap permissions, validating with a NIST GCMVS or RFC 5288 vector, or debugging DOCA_ERROR_* including the security-critical tag-verification-failed outcome on decrypt. Trigger even when the user does not explicitly mention "DOCA AES-GCM" or "AEAD" — typical implicit phrasings: "decrypt completion IO_FAILED", "auth tag isn't verifying", "NOT_PERMITTED on my encrypt buffer", "is AES-192-GCM on this BlueField" (no), or "encrypted record came back tampered". Refuse and route elsewhere for non-GCM AES modes (CBC / CTR / XTS — CPU OpenSSL), key management (KMS / HSM / rotation), SHA (doca-sha), or general AEAD background. It is best suited to users who can review the resulting actions and provide only the accounts, files, or command access needed for the task. It is not a substitute for human approval on destructive, financial, security-sensitive, or public-facing actions.

Task ideas

Popular Use Cases

  • Inspect deployment or infrastructure state
  • Automate a repeatable operations task
  • Troubleshoot configuration and runtime issues
  • Apply documented production practices

Installation

Install this Agent Skill

Claude Code

npx skills add https://github.com/NVIDIA/skills --skill doca-aes-gcm

Commands derived from the public GitHub SKILL.md record. Checked 2026-09-02. Review the source before running them.

Before you start

Requirements

Claude CodeRequired / review
CodexRequired / review
Public SKILL.md sourceRequired / review
Review instructions and requested permissions before installationRequired / review
Paid serviceCheck source
Supported systemCheck source

Popularity context

Why It’s Popular

Doca Aes Gcm is a verified Agent Skill from NVIDIA with a public SKILL.md, compatible with Claude Code, Codex.

Alternatives

Similar Skills