Session

Cryptography is essential for cybersecurity and data protection, but it is extremely easy to get wrong. Incidents like Zerologon demonstrate how easy it is for a simple tweak to a cryptographic algorithm to break everything. It’s difficult to know what will break a cryptographic algorithm, and the modern algorithms we rely on today are considered secure because a lot of people have tried to break them and no one has succeeded yet. That said, there are some fundamental and common mistakes that undermine the security of cryptographic algorithms. This session discusses some of the main ways in which cryptography can go wrong, what happens when these errors occur, and best practices for mitigating the risks of bad cryptography.