# CLI crypto plugins

Plugin model
- Providers implement ICryptoProvider with SignAsync and VerifyAsync.
- Providers declare Name and SupportedAlgorithms.
- Optional diagnostics interface exposes health checks and metadata.

Key references
- CryptoKeyReference describes key id, source, and parameters.
- CryptoKeyInfo exposes key metadata and signing capabilities.

Registration
- Plugins are registered via DI in the CLI host.
- Provider selection uses the --provider flag or profile defaults.

Related references
- docs/cli/crypto-plugins.md
- docs2/cli/crypto.md