When Encryption Fails
summary
Argues that weaknesses come from lifecycle and links not just algorithms, splitting cryptography into the math layer (textbook RSA, elliptic-curve choices for quantum resilience), the developer implementation (algorithms packaged into code), deployment (SSH keys historically shipped without passphrases) and users. Gives a concrete exploit vector: a 2012 US drone loss plausibly via a downgrade attack from military GPS to weaker civilian signals allowing spoofing. Stresses traffic analysis and denial as side channels and promotes good enough encryption — short-lived secrecy (minutes) rather than decade-scale brute-force resistance.
AI-written summary · about
chapters (6)
- 0:00Introduction and background
- 3:11Encryption lifecycle stages
- 6:38Security beyond algorithms
- 9:47Side channel and realistic risks
- 10:49Cross-domain cyber challenges
- 12:12Security as a disabler
related talks
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
54mBroken Crypto is Broken
32mEncryption - A Deeper Review
58mKeynote: Crypto means Cryptography!
01h 04m Cryptography For Newcomers - The hitchhiker's guide to cipher in devs 
55mThe secrets of Cryptography
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
44mCryptography Pitfalls