Unlocking the unknowns: Cryptography Essentials for Spring Developers
summary
Covers concrete defaults and migrations: AES modes compared with use AES-GCM not ECB because GCM adds an IV and authentication tag giving confidentiality plus integrity and is parallelizable while ECB leaks patterns, CBC needs padding and lacks auth. Recommends prefer ECC over RSA for new systems for smaller keys and better performance though RSA remains common. Passwords use BCrypt by default in Spring (cost ~10) but Argon2 is stronger — Spring defaults ~2 iterations and 64MB memory; tune for your hardware.
AI-written summary · about
chapters (17)
- 0:00Cryptography essentials intro
- 1:05Security and crypto matter
- 3:11Speaker intro
- 4:37Symmetric encryption basics
- 8:13AES modes ECB CBC GCM
- 16:39Why GCM preferred
- 18:53Symmetric vs asymmetric keys
- 19:35RSA vs ECC
- 26:27Asymmetric key security
- 26:49Password hashing BCrypt Argon2
- 33:10BCrypt password storage
- 34:32Argon2 vs BCrypt
- 39:29SHA not for passwords
- 40:52SHA2 SHA3 for integrity
- 42:15Spring crypto specs
- 46:10Book and closing
- 46:53Post-quantum crypto Q&A
related talks
34mUnlocking the unknowns: Cryptography Essentials
52mTales from the Crypt: A Cryptography Primer
30mAre we using Java Crypto API Securely ?
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
01h 04m Cryptography For Newcomers - The hitchhiker's guide to cipher in devs 
36mModern Cryptography for the Absolute Beginner
42mEverything I always wanted to know about crypto
32mEncryption - A Deeper Review