A. Cipher, L. Merkle

The book is packed with practical code snippets (mostly in JavaScript and Python). It shows you how to use cryptographic libraries correctly. This is crucial because the history of security breaches is largely a history of developers implementing algorithms wrong, not the algorithms themselves being broken.

| Chapter | Focus | Hands-on | |---------|-------|----------| | 8 | TLS 1.3 | Use openssl s_client to connect to google.com ; parse certificate chain. | | 9 | Secure Messaging (Signal) | Understand double ratchet; simulate a message ratchet in Python (simplified). | | 10 | Cryptographic APIs (PKCS#11, TPM) | Compare software vs hardware keys; write a key generation script using cryptography.hazmat . | | 11 | Crypto in blockchains (Bitcoin/Ethereum) | Recreate a Bitcoin-style signature (ECDSA + SHA256); notice malleability. | | 12 | Post‑quantum crypto (intro) | Install liboqs ; run a Kyber key exchange demo. |

Hardware security, Post-Quantum crypto, and why systems fail. Real-World Cryptography - David Wong - Manning Publications