.NET Data Security : Hope is not a Strategy
summary
Practical .NET steps for protecting data: use RNGCryptoServiceProvider to generate 32‑byte session keys and 16‑byte IVs, hash with SHA‑256 and HMAC for integrity, store passwords with RFC2898DeriveBytes (PBKDF2) at ~100k–200k iterations, prefer AESCryptoServiceProvider for symmetric encryption and 2048‑bit RSA for wrapping keys, then combine AES+RSA+HMAC+digital signatures into a hybrid scheme; code samples and full examples live on the GitHub repository linked in the description.
AI-written summary · about
chapters (29)
- 0:00Start
- 0:46Supplemental Materials
- 2:06Why Are We Here
- 6:11Four Pillars to Cryptography
- 6:45Examples of Cryptography
- 9:10To Generate a Random Number
- 9:44Hashing
- 10:17Properties of Hashing
- 11:25Ham Hashing Algorithms
- 12:59How Do We Create a Hash
- 13:31Authenticated Hashing
- 14:45Brute-Force Attack
- 15:18Passwords
- 16:04Dictionary or Rainbow Table Attack
- 17:17Salted Password
- 18:06Password-Based Key Derivation Function
- 18:58A Password Based Key Derivation Function
- 21:45Bcrypt
- 22:54Encryption
- 30:07Prime Number Factorization
- 31:02How Does this Work in Practice
- 32:36Encrypt some Data
- 33:33Digital Signatures
- 36:39Verify that a Signature Is Valid
- 37:21Recap of the Four Pillars
- 38:03Hybrid Encryption
- 38:35Combining Rsa and Ies into a Hybrid Scheme
- 46:05Further Reading
- 46:56Applied Cryptography
related talks
52m.NET Data Security : Hope is not a Strategy
52m.NET Core Data Security : Hope is not a Strategy
30mSecuring the Connected World - Detangling Encryption and Decryption
32mEncryption - A Deeper Review
51mKeynote: Data is a new security boundary
40mSecure application design with high data privacy requirements
52mTales from the Crypt: A Cryptography Primer
50mSecuring IoT Data with Pervasive Encryption