10 parts · 18 chapters

Cryptography and Security Foundations

Cryptography is a small set of primitives with precise guarantees, and most real failures come from using the right primitive the wrong way: a nonce reused, a hash used where a MAC was needed, a password hashed fast, a signature not checked. This course explains each primitive by what it guarantees, with costs measured on this machine.

Ten parts: hashes and MACs; symmetric ciphers and modes; public-key cryptography; digital signatures; key exchange; PKI and certificates; TLS from the bytes; password storage; common misuse; and threat modelling.

hashes and MACs · symmetric ciphers and modes · public-key crypto · signatures · key exchange · PKI and certificates · TLS from the bytes · password storage · common misuse · threat modellingeveryone without a CS degree · backend and security-minded engineers
integrityHashes, MACs and HMAC, and which one each job needs.
confidentialityAES, ChaCha20, AEAD modes, nonces and keys.
public keyRSA, elliptic curves, signatures and key exchange.
trustCertificates, chains, PKI, and TLS put together.
passwordsArgon2id, scrypt, bcrypt, salts and peppers.
practiceMisuse patterns and STRIDE threat modelling.
Built on Discrete Maths and NetworkingNumber theory (course 25) explains why the maths works; Networking part 7 and Auth build on TLS, signatures and tokens.