Applied cryptography

As explained in Real-World Cryptography

Application-oriented cryptography concerned with deploying secure cryptographic algorithms and protocols under practical system constraints.

Applied cryptography deploys cryptographic algorithms and protocols in real applications, where attackers, performance, input and output sizes, and implementation choices all matter. section 1.6

It protects everyday systems by combining:

• Confidentiality for private data and identities. section 1.9
• Authentication for verifying people, data, or messages. section 1.9
• Symmetric and asymmetric primitives, including encryption, key exchange, and digital signatures. section 1.9

Its threat model extends beyond network interception: endpoints, operating systems, shared machines, payment terminals, and data centers may already be compromised. Security therefore depends on stated assumptions about attackers. section 13.1

A skimmer at an ATM

A malicious reader can copy card data, while a hidden camera may capture a PIN. This illustrates why protecting data in transit is not enough. section 13.1

Figure 13.1 A skimmer, a malicious device that can be placed in front of ATM or payment terminal card readers in order to copy data contained in the card magnetic stripe. The magnetic stripe usually contains the account number, the expiration date, and other metadata that’s used by you to pay online or in a number of payment terminals. Skimmers are sometimes accompanied with a hidden camera to obtain your PIN as well, potentially enabling the thief to use ATM withdrawals and payment terminals enforcing PIN entry.

Use the skimmer figure to inspect a concrete payment-terminal attack and its captured data. section 13.1

How Real-World Cryptography covers it

How deep it goes

Explains practical constraints and expanded attacker models, then illustrates failures such as signature substitution attacks.

Examples

Uses banking, messaging, lost phones, ATM skimmers, compromised devices, shared hosting, and signature substitution attacks.

What you can do after

Evaluate cryptographic designs against practical constraints, attacker assumptions, and implementation or composition failures.

How it connects

Connects theoretical cryptography with cryptographic primitives, symmetric cryptography, asymmetric cryptography, authentication, confidentiality, and digital signatures.

liveBookmanning.com

Read Real-World Cryptography on liveBook Get the book at manning.com

Related concepts

• theoretical cryptographycontrasts with · Theoretical cryptography is the academic study of cryptographic constructions, properties, and security foundations, often without immediate practical implementation.
• defense in depthuses · Defense in depth is a security strategy that combines multiple protective controls so that the failure or compromise of one does not eliminate all protection.
• cryptographykind of · Cryptography is the study and application of mathematical techniques for protecting information and communications through confidentiality, integrity, authentication, and related security properties.
• cryptographic primitiveuses · A cryptographic primitive is a fundamental algorithmic building block that provides a basic security function such as encryption, hashing, or digital signing.

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.