Managing Tessera Pay's cryptographic keys, where one mishandled key exposes customer card data, drawn as a golden key whose teeth form a rising staircase of the eight lifecycle stages: generate from the OS random generator with AES-256-GCM, distribute wrapped and never in the clear, store in a non-exportable FIPS HSM, use with unique nonces and one key per job, rotate yearly and automatically with no downtime, revoke a key from a stolen laptop instantly by moving from version 2 to 3, destroy by crypto-shredding, and audit every key and every use. Above, the findings fixed: 37 hardcoded keys down to zero, DES, SHA-1 and RC4 retired, 1.4 million data keys wrapped instead of stored in plaintext, and a 2,190-day-old data key brought onto 365-day rotation.

CY-MID-008Mid Level · Applied Cryptography & Key Management

Applied Cryptography & Key Management — The Key Lifecycle

A hands-on mid-level course that uses cryptography correctly and manages keys through their whole life. Work the key lifecycle - eight stages a key climbs from birth to retirement: Generate, Distribute, Store, Use, Rotate, Revoke, Destroy, and Audit - using vetted primitives, keeping keys secret and managed, and never reusing a key or a nonce, with real OpenSSL, KMS/HSM, envelope-encryption, authenticated-encryption, rotation, and crypto-inventory work. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Generate keys from a CSPRNG with current algorithms, separated by purpose.
Distribute and store keys without exposure, using wrapping, envelope encryption, and an HSM/KMS.
Use keys correctly: authenticated encryption, unique nonces, one purpose per key, vetted libraries.
Rotate, revoke, crypto-shred, and prove the lifecycle against FIPS/PCI/NIST.

Price:৳8,000