Post-quantum cryptography: what changes and when
Quantum computers threaten RSA and elliptic curves, not AES. NIST's new standards, harvest now decrypt later, hybrid key exchange in browsers, and a plan for platforms.
Security & Encryption
Encryption, AES-256, TLS and HTTPS, explained
37 articles
Articles
Diffie-Hellman key exchange, explained simply
How two devices agree on a secret key in public: the colour-mixing analogy, a small-number worked example, forward secrecy, man-in-the-middle attacks and post-quantum hybrids.
What is HMAC? Signing webhooks, links and API calls
HMAC proves a message is unaltered and came from a key holder. How HMAC-SHA256 works, verifying Razorpay and Cashfree webhooks, signing video links, and mistakes to avoid.
How digital signatures work, step by step
Hash, sign with a private key, verify with a public key: what digital signatures prove, where you meet them every day, and how India's DSCs and eSign work.
Cipher suites explained: TLS 1.3 and forward secrecy
Decode a cipher suite name part by part, see TLS 1.3's five suites, learn which weak suites to remove after RFC 10015, and test what your server really accepts.
TLS 1.2 vs TLS 1.3: what changed and why it matters
TLS 1.3 connects faster and drops the options behind a decade of attacks. What changed, what 0-RTT risks, what it means on mobile, and whether to keep TLS 1.2.
SSL pinning: what it is and does your app need it?
How attackers intercept and tamper with mobile apps, what SSL pinning does about it, why apps need hardening too, and the limits that can lock users out.
What is end-to-end encryption, and how does it work?
End-to-end encryption keeps the keys on your devices, so even the service can't read your messages. How it works, how WhatsApp, Signal and Telegram differ, and what it means for leaks.
JWT vs session authentication: which should you use?
Sessions end a login instantly; JWTs skip the database lookup. How each works, why revocation decides it for device limits and forced logout, and a hybrid for web and apps.
Encryption vs tokenization: what's the difference?
Encryption transforms data; tokenization replaces it. How they compare with masking and hashing, how RBI card tokenisation works, and what to use for student and fee data.
Encryption key management: a practical guide
Keys, not ciphers, are where encryption usually fails. The key lifecycle, KMS, HSMs and vaults compared, keeping keys out of code, and what to ask a vendor.
Envelope encryption and KMS, explained
Data keys encrypt the data; a master key in a KMS wraps the data keys. How cloud KMS services work, why rotation is cheap, and the cost, quota and caching trade-offs.
Upclass for institutes
Launch your academy. Keep every course safe.
Your courses, live classes and tests in your own branded app, with piracy protection on every lecture. Plans start at ₹1,999/month.