Securing the Connected World - Detangling Encryption and Decryption
summary
Explains a concrete pipeline: generate an AES-256 single-use key to encrypt bulk data, encrypt that AES key with the recipient’s RSA 2048-bit public key, compute a SHA-256 hash of the ciphertext (with optional salt), and sign the hash with the sender’s private key so confidentiality, integrity and authenticity validate on retrieval. Recommends HSM/TPM for key storage, prefers symmetric for large payloads and asymmetric for key exchange, and cites TLS/VPN for transit and BitLocker/disk encryption for data at rest.
AI-written summary · about
chapters (9)
- 0:00Introduction to data security
- 2:06Symmetric cryptographic keys
- 3:51Asymmetric cryptographic keys
- 5:59Confidentiality use case
- 13:23Ensuring data authenticity
- 16:18Verifying data integrity
- 20:18Combining all security aspects
- 23:53Encryption best practices
- 29:11Conclusion and Q&A
related talks
32mEncryption - A Deeper Review
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
51mWhere should I be encrypting my data
52m.NET Data Security : Hope is not a Strategy- 51mWhere should I be encrypting my data
50mSecuring IoT Data with Pervasive Encryption
52mMore Secrets of Cryptography
01h 04mWhispered Secrets