Keys from the castle: ancient art of managing keys and trust
summary
Covers concrete key management steps: generate keys as close to use as possible, use a KDF for passwords, never encrypt data with the same key you store with that data, and encrypt stored keys so plaintext appears only briefly in memory. Shows code examples using Themis library, describes using iOS keychain and URLSession certificate checks, and notes SSL pinning is a few lines and prevents many MITM attacks. Recommends key rotation, revocation, per-purpose keys, and planting honey‑pot/poison keys to detect compromises.
AI-written summary · about
chapters (21)
- 0:00Intro
- 1:17THE PLAN key management
- 3:21WHAT DO WE NEED TRUST FOR? TO PROTECT THE DATA!
- 3:50HOW DOES IT WORK?
- 4:47WHAT IS A KEY?
- 5:58KEYS APP TOKENS
- 6:16WE USE KEYS TO PROTECT THE DATA
- 7:01THREATS TO THE DATA
- 7:52THREATS TO THE KEYS
- 8:21PROTECT KEYS TOO!
- 10:10KEY GENERATION
- 11:26KEY PAIR
- 13:04KEY EXCHANGE
- 16:02KEY STORAGE
- 17:11KEY ROTATION
- 21:30ESTABLISHING TRUST
- 24:07VERIFYING TRUST
- 26:30STORING TRUST (KEYS)
- 27:03OBFUSCATE Store keys as HEX
- 28:43USE NICE TOOLS
- 30:24FAKE KEYS Poison keys, marker keys
related talks
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
44mPractical Security
30mBehind Closed Doors: Managing Passwords in a Dangerous World
51mKey Management 101: DEKs, KEKs, and Credentials Living Together, Oh My!
51mKeynote: Data is a new security boundary
25mHow SSL Pinning Reinforces iOS App Security
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
40m 10 Things you Need to Know before Implementing Cryptography