Unlocking the unknowns: Cryptography Essentials
summary
Covers four concrete needs — integrity, authentication, confidentiality, non‑repudiation — and shows how to implement each with Java SE APIs plus optional Bouncy Castle. Demonstrates that Maven still publishes MD5/SHA‑1 but recommends SHA‑256 over SHA‑1/MD5, explains password hashing with Argon2 + salt + iterations (vs bcrypt), and shows JWT use as HMAC-based signatures. Explains key choices (symmetric vs asymmetric), storing private keys in JKS or a vault, CI/CD secret injection, and links to working code and a book.
AI-written summary · about
chapters (7)
- 0:00Cryptography essentials
- 3:43Data integrity with hashing
- 11:12Password hashing securely
- 15:51Authentication with message authentication codes
- 20:49Confidentiality via encryption
- 26:28Secrets in code and deployments
- 30:45Identity verification with signatures
related talks
52mCryptography 101 for Java developers
48mCryptography 101 for Java developers
52mUnlocking the unknowns: Cryptography Essentials for Spring Developers
52mModern Cryptography for the Java Developer
41mHow to Use Java Cryptography API Securely
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
40mMaximizing Security with JDK: Understanding Built-in Capabilities
