Modern Cryptography
summary
Modern cryptography advice: never roll your own and prefer vetted standards — use TLS/SSL for transport and GPG for data at rest, disable SSL compression to mitigate CRIME, and replace raw hashes-with-keys with HMAC-SHA256 to prevent length‑extension attacks (exploited at Flickr). Use a CSPRNG like Ruby’s SecureRandom or /dev/(u)random — remember the Debian OpenSSL 2006‑2008 bug that forced mass key revocations. Store passwords with adaptive hashes (bcrypt, scrypt, PBKDF2); GPUs can try up to 2 billion SHA‑1/sec, so don’t use plain SHA‑1.
AI-written summary · about
chapters (6)
- 0:00Intro
- 1:17Modern Cryptography
- 7:34Random Number Generation
- 11:56Length Extension Attacks
- 17:09Password Storage
- 21:03Trust
related talks
46mCryptography For Beginners
44mCryptography Pitfalls
55mCrypto for Developers: Making Sane Choices
52mTales from the Crypt: A Cryptography Primer
47mPractical Security Foundations
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
36mModern Cryptography for the Absolute Beginner
01h 04m Cryptography For Newcomers - The hitchhiker's guide to cipher in devs