Serious Cryptography

About the book

Serious Cryptography is a survey of applied cryptography for readers who want to understand the machinery behind encryption instead of treating it as a black box. It moves from foundational building blocks such as block ciphers, hash functions, and message authentication through key exchange, public-key encryption, and the design of secure protocols.

Aumasson writes as a practitioner. The emphasis falls on how primitives behave in combination and where implementations go wrong. Readers meet the vocabulary and structures that recur in security engineering: modes of operation, authenticated encryption, elliptic curves, and the difference between a cryptographic primitive and a protocol built from it.

The result sits between a textbook and a field manual. It gives enough theory to explain why a construction works and enough engineering detail to show why a plausible-looking design can still fail.

How to read it

Approach the book in order. Later material assumes familiarity with the primitives introduced earlier, and the protocol discussions make more sense once the underlying components are clear. Keep a notebook for the distinctions the book draws repeatedly, such as confidentiality versus integrity and randomness versus predictability.

The prose is compact and technical. Expect definitions, diagrams, and short code-flavored examples rather than extended case studies. Readers without prior exposure to modular arithmetic or basic probability will need to slow down in the public-key sections. The exercises and references offer routes for going deeper.

Who it suits

This suits software engineers, systems administrators, and security practitioners who use cryptographic libraries and want to reason about the choices those libraries make. It also fits students who have some programming background and want a practical bridge from theory to deployed systems. Readers seeking a gentle popular introduction or a proof-heavy academic treatment should look elsewhere; this book assumes an appetite for technical detail.

Reading considerations

Cryptography moves quickly, and a survey of this kind will not reflect every later development in protocols and recommendations. Treat specific algorithm guidance as a starting point and check current standards before relying on it. The book explains mechanisms; it does not replace a security review of any particular system.