How deeply does Hacking Cryptography cover OpenSSL?

Explains its engineering role and limitations, but does not detail APIs, configuration, algorithms, or vulnerability remediation.

OpenSSL

As explained in Hacking Cryptography

OpenSSL is an open-source software toolkit that provides implementations of cryptographic primitives, protocols, and related security functions.

OpenSSL is a widely used cryptographic engine for security-sensitive software. It provides a practical alternative to implementing cryptographic primitives, protocols, and related code from scratch, where subtle implementation errors can undermine otherwise sound security designs. section 1.4

Use OpenSSL as part of a broader engineering strategy:

Prefer established, thoroughly tested cryptographic implementations over custom production cryptography. section 1.4
Choose TLS rather than designing a private protocol for message encryption, using versions and algorithms recommended by relevant standards and regulatory authorities. section 1.4
Treat OpenSSL as a risk-reduction choice, not as a guarantee that bugs or insecure interactions are impossible. section 1.4

How Hacking Cryptography covers it

liveBook manning.com

Read Hacking Cryptography on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Secure APIsOpenSSL is an open-source toolkit implementing cryptographic protocols, algorithms, certificates, and key-management operations.
liveBook manning.com

Building Web APIs with ASP.NET CoreOpenSSL is an open-source toolkit and command-line tool for cryptography, certificates, and related security files.

Compare how 3 books explain OpenSSL →

Related concepts

self-signed certificateproduces · A self-signed certificate is a digital certificate whose signature is created by the same entity and key identified by the certificate rather than by a certificate authority.
TLSimplements · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
certificateuses · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
public-private key pairproduces · A public-private key pair is a mathematically related public key and private key used together for asymmetric cryptographic operations.

This explainer was generated by Manning's knowledge graph from the text of Hacking Cryptography. The section links point to the parts of the book it draws on.