24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them

SIN 21Using the Wrong Cryptography

OVERVIEW OF THE SIN

This chapter covers a multitude of sins that all relate to the way cryptography and cryptographic algorithms are chosen, used, and abused.

For some defenses, correct use of the appropriate cryptographic defense leads to an effective defense. But “correct” and “appropriate” are often hard to attain, especially if the designer or developer has little knowledge of cryptography. Few people really know how to correctly use cryptography all the time, but unfortunately, many people do think they know when they don’t, and that’s scary. At least those that know they don’t know realize they need to get help and guidance from someone who does know.

This chapter covers all sort of common crypto issues, ...