From the course: Threat Modeling: Information Disclosure in Depth

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Cryptography

Cryptography

From the course: Threat Modeling: Information Disclosure in Depth

Start my 1-month free trial

Cryptography

- [Instructor] Cryptography is the best way to protect information from disclosure. When you create ciphertext by encrypting plain text with a key, then the only way to get the plain text from the ciphertext is to either get the key or break the crypto system. Modern crypto systems are very hard to break, so practically, an attacker needs to get the key. That means you need to manage a key very carefully as we discussed in secrets management. Also, encryption protects confidentiality. In normal use, it will not protect your data from tampering. Using authenticated encryption modes well can be tricky, and it's outside the scope of this course. Cryptography applied well is the best defense against information disclosure.

Contents