Practical Security Foundations
summary
Practical rules: use vetted primitives and libraries, not homemade crypto — AES-GCM or ChaCha20-Poly1305 for authenticated encryption, Argon2 for password hashing, and libsodium as an implementation. One-time pads need ~1 TB per 5 MB transfer and are impractical; Hashcat can do ~8 billion hashes/sec so MD5/SHA are insufficient. Nonce reuse is catastrophic (AES-GCM uses 96‑bit nonces, ChaCha variants use larger nonces), derive separate keys per use, and use DPAPI/HSM or an existing key service for key management.
AI-written summary · about
chapters (8)
- 0:00Introduction to security basics
- 1:48Why security is a tax
- 6:00False teams in cryptography
- 13:45Encryption modes and pitfalls
- 22:47Password hashing explained
- 27:48Public key encryption
- 35:49Key management challenges
- 39:57Q&A session
