Why? Because I can - the stories from the crypt(ography)
summary
Walks through real bug reports from the CryptoSwift repo (≈500 issues over 4 years) and gives concrete fixes: don’t treat ciphertext as UTF‑8 — use base64/hex, prefer AES with authenticated mode and never reuse a zero IV for CBC, use PKCS7 padding correctly, derive keys with PBKDF2 instead of OpenSSL’s EVP_BytesToKey, add an HMAC/tag over IV+ciphertext, and use RSA only to encrypt a short AES session key. Good if needing practical Swift crypto interoperability fixes.
AI-written summary · about
chapters (8)
- 0:00Start
- 18:45CIPHER BLOCK MODE
- 20:02COUNTER MODE (CTR)
- 22:06CIPHER BLOCK CHAINING (CBC)
- 22:58IV IS PUBLIC
- 26:00PADDING
- 42:33AUTHENTICATE
- 43:21KEY EXCHANGE
related talks
44mMobiconf 2018: Marcin Krzyzanowski, PSPDFKit GmbH
15mCryptography 101: What Every Swift Developer Should Understand
18mCryptography in Swift
41mBetter Than ROT13
42mEverything I always wanted to know about crypto
01h 04m Cryptography For Newcomers - The hitchhiker's guide to cipher in devs
54mBroken Crypto is Broken
58mKeynote: Crypto means Cryptography!
