SecAppDev original

Practical cryptography with Tink

Video and handoutsSecAppDev 2024

Cryptography

Abstract

There are many textbooks and courses to learn the theoretical foundations of cryptography, and particular constructions, but fewer dive into the details of how to translate that into working production code.

In this session we will describe the challenges presented by traditional cryptography libraries, and the security vulnerabilities that can result from misuse. We will then examine modern hard-to-misuse libraries, focusing on Google’s Tink library. Particular attention is paid to key storage and management.

Handouts available for this lecture

Download

Chapters

  1. Intro
  2. AEAD
  3. Tink is a Modern Crypto Library
  4. Cryptographic agility
  5. Keysets
  6. Key Management
  7. Streaming Encryption
  8. MAC
  9. Signatures
  10. JWTs
  11. Public Key Encryption
  12. Summary
  13. Q & A

In-person course

Neil Madden taught at a previous edition of SecAppDev

SecAppDev is an immersive course in secure application development, running annually since 2005. World-renowned faculty from industry and academia deliver in-depth 90-minute lectures and full-day workshops in an intimate setting, typically in early June.

More about SecAppDev

Regular updates, at most twice a month

We will email you about new talks on the SecAppDev Academy, along with updates on the annual in-person course. No tracking, and you can unsubscribe at any time.