introduction: example of failure of a large scale system deployments:
PKI and digital signatures, Android apps and clickjacking, phishing with Instant Apps
Common Criteria: general idea,
Protection Profiles: EAL system, Assets, Threats, SOs
government regulations: example FIPS 140-2 for cryptographic modules, FIPS RNG and approved algorithms,
legal regulations: example eIDAS,
GDPR: requirements, pseudonymization technologies
standards versus security: ANSI DRNG, Bleichenbacher's attack on RSA implementation,
million message attack,
Hardware Trojans
quantum computing - algorithm for breaking RSA
communication security - attacks on SSL/TLS, padding attack, Lucky Thirteen, BEAST, CRIME, TIME, BREACH,
POODLE,
problems with RC4, block encryption modes: CCM, Galois Counter Mode, attacks on GCM, ChaCha. Poly, changes in TLS 1.3
attacks via certificates: rogues certificates with MD5, FLAME
cache attacks: attacks on AES, Spectre, Meltdown
disk encryption: encryption methods, password protection