The development of 'civil' cryptography. Releasing mobile app updates with FIPS-certified crypto
summary
Discusses organizing the development and release process for mobile apps that include certified cryptographic protection modules (СКЗИ), focusing on meeting information security requirements, maintaining required customer approval workflows, and enabling a high cadence of updates. Covers practical steps to reconcile regulatory/compliance constraints of civil cryptography with frequent mobile release cycles.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:29Government key creation and certification
- 5:02Mass adoption and integration
- 8:14Protection scheme and crypto nuances
- 11:11Crypto in government services
- 14:45Certification challenges and solutions
- 17:58Faster releases and automation
- 20:23Q&A
- 31:22Threat model and attack protection
- 34:58GOST updates and response
- 37:03Fraud and transaction security
related talks
26mThe ABCs (Accelerated, Better and Cheaper) to Cryptographic Resilience
35mOpenSSL's Journey: Technical Updates Governance and Community
36mUse Cryptography; Don't Learn It
49mWhy I have to waste my time on cryptography
33mComparing Strategies for Quantum-Safe Cryptography Adoption in Organizations
21mCryptography at Scale: Building a Practical Cryptographic...
35mHardware Cryptographic Modules
44mQuantum Cyber Risk: How Deep and How Wide?