Encryption - A Deeper Review
summary
Demonstrates that poor modes and key management leak real secrets: an ECB-like database was broken in 21 hours to recover a key; NIST marks 3DES deprecated 2023 and equates AES‑256 to an RSA strength near 15360 bits; recommends system sources (dev/random over urandom), HSMs for key protection (expect ≈$50k), warns key rotation and backups expose keys in memory, and promotes tokenization (Spreedly) and digital signing as practical, deployable controls.
AI-written summary · about
chapters (24)
- 0:00Introduction
- 0:30About Sikich
- 1:30Agenda
- 2:12Encryption Basics
- 4:17Prime Numbers
- 5:22Block Ciphers
- 6:31Electronic Codebook
- 8:00Benefits of Encryption
- 9:25Cipher Block Chain
- 10:56Data Integrity
- 11:25Entropy
- 12:40Sources
- 14:25Word Tests
- 15:05Math
- 18:14Word Test
- 19:33Key Management
- 20:34Key Strengths
- 23:54Crypto Period
- 24:12Security through obscurity
- 24:51Data storage
- 27:35Cardholder data
- 28:52Digital signing
- 30:46Encrypted email
- 31:19Thank you
related talks
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
42mEverything I always wanted to know about crypto
30mSecuring the Connected World - Detangling Encryption and Decryption
55mThe secrets of Cryptography
41mKeeping Secrets: Emerging Practice in Database Encryption
14mWhen Encryption Fails
30mMy code is being hacked!
51mKey Management 101: DEKs, KEKs, and Credentials Living Together, Oh My!