liveBook · Manning

Boring cryptography

As explained in Real-World Cryptography

A conservative cryptographic design approach that favors simple, well-scrutinized primitives and protocols over novel or unnecessarily complex constructions.

Boring cryptography means choosing simple, standard, well-scrutinized primitives and protocols instead of exotic constructions. Complexity creates more opportunities for vulnerabilities. section 16.1

Use the approach as a practical security rule:

  • Prefer tried-and-tested cryptography that directly fits the use case. section 16.1
  • Treat novel mathematical constructions as poor candidates until they withstand years of careful scrutiny. section 16.1
  • Avoid over-engineered systems, excessive algorithm choices, and interfaces that let users misuse cryptography. section 16.8

How Real-World Cryptography covers it

How deep it goes
Explains the principle, its security rationale, and selection guidance, but defers theoretical cryptography and formal treatment.
Examples
Uses standard primitives, exotic cryptography, excessive algorithm support, and BoringSSL as concrete contrasts or associations.
What it assumes
Assumes familiarity with standard cryptographic primitives and protocols while directing unfamiliar problems toward deeper theoretical resources.
What you can do after
Evaluate cryptographic designs conservatively and avoid unnecessary algorithmic or interface complexity.
How it connects
Connects cryptographic primitives, protocols, formal verification, usable security, and hard-to-misuse interfaces.
Cover of Real-World Cryptography
liveBookmanning.com
Read Real-World Cryptography on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.