Learn
The full module catalog
26 modules covering the cryptography behind every HTTPS connection, SSH session, and signed transaction: how it works, why it's trusted, and why it's the thing post-quantum cryptography replaces.
Every PKI, VPN and TLS terminator you've designed rests on the same handful of primitives. Get the mental model right before you redesign anything.
Start with your first win: Trace trust from key exchange to signature (40 min) →Full track: 13 modules · 300 min
Foundations
Before the math: what cryptography is actually trying to do, and the 2,500-year arms race between codemakers and codebreakers that got us here.
28 minEvery public-key algorithm in this catalog leans on the same idea: a calculation that's easy in one direction and effectively impossible to undo in the other.
42 minOne-way fingerprints for data, and the mechanism that proves a message is authentic and untampered — without encrypting anything.
29 minA cryptographic hash is too fast for passwords. KDFs deliberately slow things down — and not all of them do it the same way.
14 min128-bit AES, 2048-bit RSA, 256-bit ECC — these numbers aren't comparable at face value. Here's how to actually read them.
12 minEvery key, nonce, and IV in this catalog assumes truly unpredictable randomness. When that assumption breaks, everything built on top breaks with it.
15 minRandomness can't just be assumed good or bad — it's measured. This module covers min-entropy, the real NIST test suite for entropy sources, and why a hardware random number generator still needs that testing.
16 minThe bridge module: why everything above is called "classical" cryptography, and exactly what a future quantum computer would do to it.
13 minSymmetric-key
The same key locks and unlocks the data. Fast, simple in concept, and everywhere — from disk encryption to the bulk of every TLS session.
42 minAES's predecessor and the first cipher the world ever standardized. What retired it wasn't a flaw in the design — it was a key that was always too short.
18 minNot every symmetric cipher works in fixed blocks. ChaCha20 generates a keystream instead — and paired with Poly1305, it's AES-GCM's fastest rival.
12 minPublic-key
Two mathematically linked keys — one public, one private — solve the problem symmetric crypto can't: how do you share a secret with someone you've never met?
55 minTextbook RSA is deterministic and malleable. Padding schemes are what actually make RSA encryption and signing safe to use in the real world.
15 minThe same public-key guarantees as RSA, with dramatically smaller keys — because the underlying hard problem is different math entirely.
50 minDiffie-Hellman lets two people agree on a secret together. ElGamal uses that same discrete-log idea to let anyone encrypt to a public key — no live handshake required.
24 minProtocols
Two parties agree on a shared secret over a public channel, without ever transmitting the secret itself — the idea that started public-key cryptography.
40 minA certificate is just a signed statement binding a public key to an identity. Here's what's actually inside one, and how revocation works.
26 minJWTs put a signed claim in every request header. They're everywhere in modern APIs — and a few well-known implementation mistakes keep recurring.
28 minA passkey is what you get when you replace a password with a public-key challenge-response protocol. It fixes reuse, phishing, and breaches in one move.
22 minThe protocol behind every remote login and git push combines the same primitives as TLS, arranged slightly differently.
13 minEvery padlock icon runs a coordinated handshake combining key exchange, certificates, symmetric encryption, and integrity checks — in under a round trip.
24 minTLS protects data in transit to a server. The Signal Protocol's Double Ratchet goes further — encrypting so not even the server operator can read your messages.
15 minPractice
A cryptographic algorithm can be mathematically unbreakable and still leak its secret key through how long it takes to run.
13 minBitcoin and Ethereum don't invent new cryptography — they compose the same primitives in this catalog into a specific, tamper-evident structure.
14 minHow do you protect a master key so no single person holds it, yet any k of a trusted group can reconstruct it together? Split it across a polynomial.
20 minYou don't need a working quantum computer today to be at risk today. Anything encrypted now with RSA or ECC can simply be recorded and decrypted later.
12 min