The Art & Craft of Secrets: Using the Cryptographic Toolbox
summary
Covers concrete failures and fixes: how X.509 certificates and TLS use RSA and Diffie-Hellman for key exchange and forward secrecy, why session cookies and HMAC-backed SSO tokens matter, and why/password storage needs bcrypt with per‑user salts. Gives examples: recorded SSL sessions decryptable without forward secrecy, the 2010 FireSheep hijacks, rainbow‑table feasibility under 0.5 TB, and stolen prizes and cash ($800 and multi‑hundred‑thousand dollar heists) to show what breaks when pieces are misconfigured.
AI-written summary · about
chapters (10)
- 0:00Start
- 7:42Key Exchange
- 8:22Rsa Key Exchange
- 9:11Diffie-Hellman Key Exchange
- 10:15Forward Secrecy
- 11:49Integrity
- 14:32Server Vlog Output
- 18:14Rainbow Tables
- 23:40Firesheep
- 30:37Hash-Based Message Authentication Code
related talks
42mCryptography, hashing, encryption without the math
45mUnlocking The Secrets Of TLS
46mFrom substitutions to public keys - an introduction to cryptography
44mCryptography Pitfalls
34mUnlocking the unknowns: Cryptography Essentials
15mCryptography 101: What Every Swift Developer Should Understand
51mDon’t Throw Away the Key: What Developers Should Know about Encryption
44mCryptography in the age of Heartbleed