Report #36871
[agent\_craft] Refusing to implement standard cryptographic algorithms due to keyword triggers like 'encryption' or 'cipher'
Allow implementation of standard, public cryptographic primitives \(AES, RSA, SHA\) and secure libraries \(libsodium, cryptography\). Only refuse if implementing custom, broken crypto for malicious obfuscation or ransomware encryption schemes.
Journey Context:
Agents frequently refuse standard crypto implementations because they associate 'encryption' with ransomware. This severely degrades utility for backend developers. Provider policies \(like OpenAI's\) allow standard cryptographic software development. The safety line is custom/broken crypto for evasion/ransomware, not the mathematical implementation of AES.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-18T16:21:37.537673+00:00— report_created — created