Whispered Secrets
summary
Go code uses only the standard library to build working crypto: AES-256 streams for files and UDP, RSA for key exchange to create hybrid tunnels, and HMAC signatures for tamper-proofing. Examples include HTTPS/TLS servers and clients, TLS over TCP, bespoke AES stream encryption over UDP, and RSA packet exchange; code is compact (fits a slide) and runs live. Recommendations: pin certificates, rotate symmetric keys frequently, hash passwords client-side, and encrypt fields separately so stolen DB dumps require brute forcing each value.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:06Eleanor McHugh Whispered Secrets
- 3:39software should keep our secrets
- 4:19criminality
- 5:11sexual preferences
- 7:58reject the illegitimate
- 32:09change these keys frequently (cheap cipher streams) and pin each distinct message to a distinct key (one-time pads)
related talks
25mCryptography Isn't Scary
41mCryptographic speed, reliability & security
15mCryptography 101: What Every Swift Developer Should Understand
30mSecuring the Connected World - Detangling Encryption and Decryption
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
05mEncrypt All Transports
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
52mTales from the Crypt: A Cryptography Primer