security cryptography

Cryptography

Encryption

Readings and Examples

• EBC vs. CBC
• Ruby AES Encryption using OpenSSL

Encryption packages

• RbNaCl
  • Installing RbNaCl + libsodium as a single gem
  • SecretBox: Symmetric Key Encryption
  • Box: Asymmetric Public-Key Encryption
  • SimpleBox: Easy Asymmetric Public-Key Encryption (automatic nonces)

Hashing

• Non-password Hashing
  • Cryptography O:r How I Learned to Stop Worrying, and Love AES
• Password Hashing
  • password hashing algorithms
    • Enough With the Salts: Updates on Secure Password Schemes
      • key-stretching hash algorithms
      • scrypt vs. bcrypt vs. PBKDF2
  • Scrypt
    • Scrypt for Ruby
    • RbNaCl: Password Hashing (Scrypt)

Certificates

• Stop Paying For SSL Certificates You Don't Need
• Create a self-signed certificate using ruby-openssl

Key Escrow and Splitting

• In depth security: splitting key in different places
• Key splitting