Real-World CryptographyAn all-practical guide to the cryptography behind common tools and protocols that will help you make excellent security choices for your systems and applications. In Real-World Cryptography, you will find: Best practices for using cryptography Diagrams and explanations of cryptographic algorithms Implementing digital signatures and zero-knowledge proofs Specialized hardware for attacks and highly adversarial environments Identifying and fixing bad practices Choosing the right cryptographic tool for any problem Real-World Cryptography reveals the cryptographic techniques that drive the security of web APIs, registering and logging in users, and even the blockchain. You’ll learn how these techniques power modern security, and how to apply them to your own projects. Alongside modern methods, the book also anticipates the future of cryptography, diving into emerging and cutting-edge advances such as cryptocurrencies, and post-quantum cryptography. All techniques are fully illustrated with diagrams and examples so you can easily see how to put them into practice. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology Cryptography is the essential foundation of IT security. To stay ahead of the bad actors attacking your systems, you need to understand the tools, frameworks, and protocols that protect your networks and applications. This book introduces authentication, encryption, signatures, secret-keeping, and other cryptography concepts in plain language and beautiful illustrations. About the book Real-World Cryptography teaches practical techniques for day-to-day work as a developer, sysadmin, or security practitioner. There’s no complex math or jargon: Modern cryptography methods are explored through clever graphics and real-world use cases. You’ll learn building blocks like hash functions and signatures; cryptographic protocols like HTTPS and secure messaging; and cutting-edge advances like post-quantum cryptography and cryptocurrencies. This book is a joy to read—and it might just save your bacon the next time you’re targeted by an adversary after your data. What's inside Implementing digital signatures and zero-knowledge proofs Specialized hardware for attacks and highly adversarial environments Identifying and fixing bad practices Choosing the right cryptographic tool for any problem About the reader For cryptography beginners with no previous experience in the field. About the author David Wong is a cryptography engineer. He is an active contributor to internet standards including Transport Layer Security. Table of Contents PART 1 PRIMITIVES: THE INGREDIENTS OF CRYPTOGRAPHY 1 Introduction 2 Hash functions 3 Message authentication codes 4 Authenticated encryption 5 Key exchanges 6 Asymmetric encryption and hybrid encryption 7 Signatures and zero-knowledge proofs 8 Randomness and secrets PART 2 PROTOCOLS: THE RECIPES OF CRYPTOGRAPHY 9 Secure transport 10 End-to-end encryption 11 User authentication 12 Crypto as in cryptocurrency? 13 Hardware cryptography 14 Post-quantum cryptography 15 Is this it? Next-generation cryptography 16 When and where cryptography fails |
Contents
Hash functions | 25 |
Key exchanges | 87 |
Signatures and zeroknowledge proofs | 129 |
Randomness and secrets 152 8 1 Whats randomness? | 153 |
THE RECIPES | 175 |
The many handshakes of Noise 198 A handshake | 199 |
User authentication | 226 |
Crypto as in cryptocurrency? | 251 |
Hardware cryptography | 277 |
White box cryptography a bad idea 280 Theyre in your | 285 |
Constanttime programming 293 Dont use the secret Masking | 295 |
Is this it? Nextgeneration cryptography | 321 |
is a boring job | 344 |
appendix Answers to exercises | 357 |
Other editions - View all
Common terms and phrases
AES-GCM Alice and Bob allows applications asymmetric cryptography asymmetric encryption authenticated encryption authentication tag Bitcoin bits block Bob's browser bytes called certificate chapter cipher ciphertext client cryp Crypto cryptocurrencies cryptographic algorithms cryptographic primitives decryption devices Diffie-Hellman digest digital signatures ECDH ECDSA EdDSA elliptic curve encrypted message encryption algorithm end-to-end encryption entropy example Figure handshake hardware hash function HKDF HMAC homomorphic homomorphic encryption HSMs hybrid encryption illustrate implement input key exchange key pair Lord Bob multiple NIST nonce one-time OpenSSL operation output padding parameters participants password plaintext polynomial post-quantum prekey prime number private key PRNG problem produce proof quantum computers Queen Alice random numbers real-world cryptography Schnorr signatures secret key server shared secret signature scheme solution standard string subgroup symmetric key tion transaction trust valid vector verify zero-knowledge proofs ZKPs