Cryptography at Scale: Building a Practical Cryptographic...
summary
Claims a practical, scalable inventory called XIPHER that normalizes discoveries from code, network, and infrastructure and maps them to applications and owners. Describes an open‑source GitHub certificate scanner that extracts certs, checks algorithms and expiration, outputs CSV/HTML and a CycloneDX cryptographic bill of materials (C-BOM), and feeds an executive dashboard and risk engine CARAF. Reports deduplication across millions of certificates, customizable CA/algorithm lists, and ongoing work to cover legacy hardware.
AI-written summary · about
chapters (8)
- 0:00Cryptography migration challenges
- 1:23Post-quantum migration urgency
- 4:10Critical infrastructure complexities
- 5:36Cryptographic inventory
- 10:34Modular cryptography tooling
- 14:04Code scanning for certs and keys
- 17:53Discovery challenges in large envs
- 20:39Q&A
related talks
29mCryptographic Discovery and Inventory: The Hidden Foundation for Enterprise Security
32mPractical Insights from Following NIST SP 1800-38B
12mKeyfactor on Cryptographic Discovery: Why Knowing What You Have Is Step One
27mCrypto Agility How it’s both a Critical Component and a Complex Challenge
32mCryptographic Governance: Software Supply Chain Security With CBOM
26mThe ABCs (Accelerated, Better and Cheaper) to Cryptographic Resilience
48mCryptography for Beginners
30mTrust Engineering: Building Security Leadership at Early-Stage...