Real-World Cryptography
I keep this at #35 because a high-value technical guide to how modern cryptography succeeds—or fails—inside real systems. It earns its place every time the easy answer falls apart.
The long version
David Wong explains the cryptographic primitives and protocols that protect modern applications: hashes, authentication, encryption, key exchange, signatures, transport security, hardware, passwords, randomness, and emerging techniques. The emphasis is on how components are composed in deployed systems—and how seemingly reasonable choices become vulnerabilities. It reminds me that the work of making machines useful without letting the work become automatic does not happen only to other people.
Why it is here
It gives software practitioners enough conceptual depth to recognize dangerous designs without pretending that reading one book makes anyone a cryptographer. The real lesson is disciplined reliance on reviewed protocols, mature libraries, sound key management, and explicit threat models. The test is whether it changes what I notice after I close the book.
How to read it
Keep a threat-model worksheet beside each chapter: asset, attacker, capability, trust boundary, failure. Reproduce safe educational examples, but never invent production cryptography. Mark every point where operational key handling matters more than mathematical elegance. I will keep a note of the sentences that make me want to look away.
What it taught me
- 01
Security depends on protocols and implementation context, not isolated algorithms.
- 02
Nonce reuse, weak randomness, and poor key lifecycle can defeat strong primitives.
- 03
Authenticated encryption and modern transport protocols address multiple attacker capabilities together.
Before and after
What makes it easier
Computer Networking: A Top-Down Approach
James Kurose; Keith Ross
Serious Cryptography
Jean-Philippe Aumasson
Where it leads
Cryptography Engineering
Niels Ferguson; Bruce Schneier; Tadayoshi Kohno
Security Engineering
Ross Anderson
More about the author
David Wong is a security engineer and applied cryptographer whose work includes protocol security, zero-knowledge systems, and public cryptographic education. He emphasizes the gap between knowing primitives and building secure, maintainable systems.
More by the same hand
Real-World Cryptography
David Wong