Pillar
Cryptography
Cryptography on a product page is usually a logo. Cryptography in a service is a library, a nonce, a key you can rotate, and a default you did not change. The failures we care about are home-grown AES, ECB ‘because it was in the example,’ and JWT ‘none.’
TLS libraries
Name the library you link
Open the listPassword hashing
Store a verifier, not a souvenir
Open the listQuestions about Cryptography
What will a SecureCoding cryptography list include?
Libraries and platform features for concrete jobs: password hashing, authenticated encryption, TLS configuration, token signing. We will not publish a page that ranks AES against ChaCha in the abstract. If you cannot point at a function call, it is not a row.
Is TLS a cryptography list or a network list?
Both, for different jobs. How you terminate and configure TLS in the service is cryptography. How you inspect or intercept it on the path is network security. The TLS libraries list is live. The blog TLS guide stays the explainer.
