Practical Cryptography in Python: Learning Correct Cryptography by Example
暫譯: Python 實用密碼學：透過範例學習正確的密碼學

Nielson, Seth James, Monson, Christopher K.

Practical Cryptography in Python: Learning Correct Cryptography by Example

買這商品的人也買了...

商品描述

Develop a greater intuition for the proper use of cryptography. This book teaches the basics of writing cryptographic algorithms in Python, demystifies cryptographic internals, and demonstrates common ways cryptography is used incorrectly.

Cryptography is the life blood of the digital world's security infrastructure. From governments around the world to the average consumer, most communications are protected in some form or another by cryptography. These days, even Google searches are encrypted. Despite its ubiquity, cryptography is easy to misconfigure, misuse, and misunderstand.

Developers building cryptographic operations into their applications are not typically experts in the subject, and may not fully grasp the implication of different algorithms, modes, and other parameters. The concepts in this book are largely taught by example, including incorrect uses of cryptography and how "bad" cryptography can be broken. By digging into the guts of cryptography, you can experience what works, what doesn't, and why.

 

What You'll Learn

  •  
  • Understand where cryptography is used, why, and how it gets misused
  • Know what secure hashing is used for and its basic properties
  • Get up to speed on algorithms and modes for block ciphers such as AES, and see how bad configurations break
  • Use message integrity and/or digital signatures to protect messages
  • Utilize modern symmetric ciphers such as AES-GCM and CHACHA
  • Practice the basics of public key cryptography, including ECDSA signatures
  • Discover how RSA encryption can be broken if insecure padding is used
  • Employ TLS connections for secure communications
  • Find out how certificates work and modern improvements such as certificate pinning and certificate transparency (CT) logs

 

 

 

 

 

 

 

 

 

 

Who This Book Is For

IT administrators and software developers familiar with Python. Although readers may have some knowledge of cryptography, the book assumes that the reader is starting from scratch.

商品描述(中文翻譯)

開發對於正確使用密碼學的更深直覺。本書教授在 Python 中編寫密碼演算法的基本知識，揭開密碼學的內部運作，並展示密碼學常見的錯誤使用方式。

密碼學是數位世界安全基礎設施的命脈。從全球各國政府到一般消費者，大多數通訊都以某種形式受到密碼學的保護。如今，甚至 Google 搜尋也已加密。儘管密碼學無處不在，但它很容易被錯誤配置、誤用和誤解。

將密碼操作整合到應用程式中的開發者通常並不是該領域的專家，可能無法完全理解不同演算法、模式和其他參數的含義。本書中的概念主要通過範例進行教學，包括密碼學的錯誤使用以及「不良」密碼學如何被破解。通過深入了解密碼學的核心，您可以體驗什麼有效、什麼無效，以及原因。

您將學到的內容：

- 了解密碼學的使用場景、原因及其誤用方式
- 知道安全雜湊的用途及其基本特性
- 熟悉區塊加密演算法及模式，如 AES，並了解錯誤配置如何導致失敗
- 使用訊息完整性和/或數位簽章來保護訊息
- 利用現代對稱加密演算法，如 AES-GCM 和 CHACHA
- 練習公鑰密碼學的基本知識，包括 ECDSA 簽章
- 發現如果使用不安全的填充，RSA 加密如何被破解
- 使用 TLS 連接進行安全通訊
- 了解證書的運作方式及現代改進，如證書釘選和證書透明度 (CT) 日誌

本書適合對象：

熟悉 Python 的 IT 管理員和軟體開發者。雖然讀者可能對密碼學有一定的了解，但本書假設讀者是從零開始學習。

作者簡介

Dr. Seth James Nielson is the founder and chief scientist of Crimson Vista, Inc., a boutique computer security consulting company. He is also the director of advanced research projects at the Johns Hopkins University Information Security Institute where he teaches courses in network security. At Johns Hopkins, he has been working on developing the cryptodoneright.org knowledge base, through a generous grant from Cisco. In working on this project, he came to better understand the knowledge gap between cryptographers and developers. He believes that this book can make a real difference in how cryptography is used and deployed in cyberspace.

Dr. Chris Monson has a PhD in machine learning, has spent over a decade at Google in various engineering and leadership roles, and is currently the director of machine learning at Data Machines Corp. He has broad experience writing and teaching programming courses in multiple languages, and has worked in document password recovery, malware detection, and large-scale secure computing.

作者簡介(中文翻譯)

塞斯·詹姆斯·尼爾森博士是Crimson Vista, Inc.的創始人及首席科學家，這是一家專注於電腦安全的顧問公司。他同時也是約翰霍普金斯大學資訊安全研究所的高級研究項目主任，並教授網路安全課程。在約翰霍普金斯大學，他正在開發cryptodoneright.org知識庫，這是由Cisco提供的慷慨贊助支持的項目。在這個項目中，他更深入地了解了密碼學家與開發者之間的知識差距。他相信這本書能夠在密碼學在網路空間中的使用和部署上產生真正的影響。

克里斯·蒙森博士擁有機器學習的博士學位，在Google擔任過十多年的各種工程和領導職位，目前是Data Machines Corp.的機器學習主任。他在多種程式語言中撰寫和教授程式設計課程方面擁有廣泛的經驗，並曾參與文件密碼恢復、惡意軟體檢測以及大規模安全計算的工作。

類似商品

最後瀏覽商品 (10)