AES-GCM vs AES-CBC: which mode should you use?
GCM authenticates, CBC doesn't. Padding oracles, NIST's nonce rules, measured speeds, and why TLS uses GCM while HLS video still uses CBC.
Security & Encryption
Encryption, AES-256, TLS and HTTPS, explained
37 articles
Articles
Block cipher vs stream cipher: differences and examples
AES vs ChaCha20 in practice: how block and stream ciphers process data, why CTR and GCM modes blur the line, which is faster on phones, and the nonce-reuse trap.
Types of encryption: algorithms and where each is used
Symmetric, asymmetric, key exchange and hashes: a map of AES, ChaCha20, RSA, ECC and more, which algorithms to retire, and where each one protects a video lesson.
What is HTTPS, and why every site needs it
HTTPS encrypts and protects every page between your server and your visitors. Why even a simple institute website needs it, and how to set it up properly.
What is mTLS, how does it work, and why does almost nobody use it?
Mutual TLS makes both sides of a connection prove who they are. It's common between servers but rare for people. Here's how it works, and why.
What is RASP? Runtime app protection and its limits
Runtime application self-protection helps mobile apps notice tampering and hostile devices. The attacks it targets, where it falls short, and what to ask a vendor.
HLS encryption: how AES-128 video encryption works
What HLS encryption protects, why it's so often bypassed through the key every player receives, what it can't do, and what to ask your video platform.
Is AES-128 still secure? Key size vs key handling
Yes, with caveats that have nothing to do with key length: the brute-force maths, what quantum computing changes, GCM and CBC pitfalls, and AES-128 in HLS video.
Key rotation: what it is and how often to rotate keys
What goes wrong without key rotation, how often NIST suggests rotating, why rotation isn't re-encryption, the special case of video keys, and what to ask.
Is Base64 encryption? Why encoding isn't security
No: Base64 is a public, keyless encoding anyone can reverse. How it works, why 'Base64-encrypted' passwords, tokens and links leak, and what to use instead.
What is hashing in cyber security? SHA-256 explained
Hashing gives data a fixed-length fingerprint that can't be reversed. How SHA-256 works, what makes a hash secure, why MD5 and SHA-1 are broken, and hashing leak evidence.
Password hashing: salts, bcrypt and Argon2 explained
Why fast hashes fail for passwords, how salts and work factors stop cracking, current bcrypt, scrypt and Argon2id settings, peppers, and upgrading legacy MD5 hashes.
Upclass for institutes
Launch your academy. Keep every course safe.
Your courses, live classes and tests in your own branded app, with piracy protection on every lecture. Plans start at ₹1,999/month.