Profiles
Who's asking?
Pick the closest fit and the site leads with what's most useful to you: Learn, Explore, Use Cases, Standards and Quizzes highlight the pages recommended for your profile. You'll still see everything, nothing gets hidden, and you can switch at any time from the Profile menu in the top bar.
Risk exposure & investment focus
Executive / Business Leader
Your board is asking about the PQC migration. Before you can answer, you need to know what "classic" crypto your organisation actually depends on today.
First win: See what's actually at risk · 12 min, then 5 modules · 120 min
5 Learn modules · 120 min
6 use cases · 117 min
- Running a PKI: how a certificate authority actually operates
- Key ceremonies and the HSM key hierarchy: where every payment key comes from
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Tokenizing card numbers and SSNs with format-preserving encryption
- Code signing: proving who shipped a binary, and what it can't prove
- BYOK and HYOK: who really controls your cloud encryption keys
4 standards pages · 85 min
– reviewed
Obligations, inventory & evidence focus
GRC / Risk & Compliance
Auditors want a cryptographic bill of materials. Know which algorithms are in scope before you can attest to anything.
First win: Map the algorithms you must inventory · 24 min, then 6 modules · 117 min
6 Learn modules · 117 min
8 use cases · 152 min
- Running a PKI: how a certificate authority actually operates
- Key ceremonies and the HSM key hierarchy: where every payment key comes from
- CVV/CVC: the three digits that never survive an authorization
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Tokenizing card numbers and SSNs with format-preserving encryption
- Code signing: proving who shipped a binary, and what it can't prove
- Secure boot: a chain of signatures from the first instruction to the OS
- BYOK and HYOK: who really controls your cloud encryption keys
6 standards pages · 125 min
- NIST: the standards body behind AES, SHA, and post-quantum cryptography
- ISO/IEC: the paywalled standards behind ISMS certification and algorithm testing
- EMVCo & PCI SSC: the industry bodies behind chip cards, CVVs, and compliance
- FIPS 140-3 and the CMVP: what 'FIPS validated' actually means
- Common Criteria (ISO/IEC 15408): evaluating products against the claims they choose
- ETSI and eIDAS: qualified signatures, trust services, and the EU Digital Identity Wallet
– reviewed
Implementation & protocol focus
Developer / Engineer
RSA, AES, ECDSA and SHA-2 are already in every library you import. Understand what they actually do before you touch a crypto API.
First win: See a real handshake, step by step · 24 min, then 17 modules · 471 min
17 Learn modules · 471 min
- The history and purpose of cryptography
- The math underneath: modular arithmetic & one-way functions
- Symmetric-key cryptography & AES
- The Data Encryption Standard (DES)
- Stream ciphers & ChaCha20-Poly1305
- RSA & public-key cryptography
- RSA padding: OAEP, PKCS#1 v1.5, and why raw RSA fails
- Elliptic Curve Cryptography (ECC / ECDSA)
- Diffie-Hellman key exchange
- The ElGamal cryptosystem
- Hash functions & digital signatures
- Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2
- JSON Web Tokens & API authentication
- Passkeys & WebAuthn
- TLS in practice: how HTTPS puts it all together
- Random number generation: the primitive everything else depends on
- Side-channel & timing attacks: when the math is fine but the implementation isn't
12 use cases · 224 min
- Envelope encryption: how a KMS actually protects your data
- Key wrapping and key exchange: moving keys without ever exposing them
- PKCS#11: the standard behind every HSM and smart card
- Federated identity: OAuth2, OIDC, and SAML, untangled
- PIN blocks: encrypting a 4-digit number like it's a nuclear launch code
- CVV/CVC: the three digits that never survive an authorization
- EMV chip authentication: the conversation behind every chip transaction
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Tokenizing card numbers and SSNs with format-preserving encryption
- DUKPT: a fresh key for every card payment at the counter
- Code signing: proving who shipped a binary, and what it can't prove
- Secure boot: a chain of signatures from the first instruction to the OS
7 standards pages · 143 min
- NIST: the standards body behind AES, SHA, and post-quantum cryptography
- The IETF: RFCs and the protocols the internet actually runs
- ISO/IEC: the paywalled standards behind ISMS certification and algorithm testing
- OASIS: where the identity and PKI-token standards actually get written
- EMVCo & PCI SSC: the industry bodies behind chip cards, CVVs, and compliance
- FIPS 140-3 and the CMVP: what 'FIPS validated' actually means
- ETSI and eIDAS: qualified signatures, trust services, and the EU Digital Identity Wallet
– reviewed
System & infrastructure focus
Security Architect
Every PKI, VPN and TLS terminator you've designed rests on the same handful of primitives. Get the mental model right before you redesign anything.
First win: Trace trust from key exchange to signature · 40 min, then 13 modules · 300 min
13 Learn modules · 300 min
- Diffie-Hellman key exchange
- The ElGamal cryptosystem
- Elliptic Curve Cryptography (ECC / ECDSA)
- Hash functions & digital signatures
- X.509 certificates & the PKI trust hierarchy
- TLS in practice: how HTTPS puts it all together
- SSH: key exchange, host keys, and authentication
- Passkeys & WebAuthn
- End-to-end encrypted messaging: the Signal Protocol
- Shamir's Secret Sharing
- Key sizes & security levels: what the numbers mean
- Side-channel & timing attacks: when the math is fine but the implementation isn't
- Harvest now, decrypt later: the risk that's already here
15 use cases · 288 min
- Envelope encryption: how a KMS actually protects your data
- Key wrapping and key exchange: moving keys without ever exposing them
- PKCS#11: the standard behind every HSM and smart card
- Running a PKI: how a certificate authority actually operates
- Federated identity: OAuth2, OIDC, and SAML, untangled
- Key ceremonies and the HSM key hierarchy: where every payment key comes from
- PIN blocks: encrypting a 4-digit number like it's a nuclear launch code
- CVV/CVC: the three digits that never survive an authorization
- EMV chip authentication: the conversation behind every chip transaction
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Tokenizing card numbers and SSNs with format-preserving encryption
- DUKPT: a fresh key for every card payment at the counter
- Code signing: proving who shipped a binary, and what it can't prove
- Secure boot: a chain of signatures from the first instruction to the OS
- BYOK and HYOK: who really controls your cloud encryption keys
8 standards pages · 163 min
- NIST: the standards body behind AES, SHA, and post-quantum cryptography
- The IETF: RFCs and the protocols the internet actually runs
- ISO/IEC: the paywalled standards behind ISMS certification and algorithm testing
- OASIS: where the identity and PKI-token standards actually get written
- EMVCo & PCI SSC: the industry bodies behind chip cards, CVVs, and compliance
- FIPS 140-3 and the CMVP: what 'FIPS validated' actually means
- Common Criteria (ISO/IEC 15408): evaluating products against the claims they choose
- ETSI and eIDAS: qualified signatures, trust services, and the EU Digital Identity Wallet
– reviewed
Deploy & operate focus
IT Ops / DevOps
Certificates, cipher suites, key sizes — the settings you configure every day encode decades of cryptographic design. Know what they mean.
First win: Understand what a cipher suite actually says · 24 min, then 9 modules · 186 min
9 Learn modules · 186 min
- Symmetric-key cryptography & AES
- Stream ciphers & ChaCha20-Poly1305
- TLS in practice: how HTTPS puts it all together
- X.509 certificates & the PKI trust hierarchy
- SSH: key exchange, host keys, and authentication
- Passkeys & WebAuthn
- Shamir's Secret Sharing
- Key sizes & security levels: what the numbers mean
- Random number generation: the primitive everything else depends on
11 use cases · 220 min
- Envelope encryption: how a KMS actually protects your data
- Key wrapping and key exchange: moving keys without ever exposing them
- PKCS#11: the standard behind every HSM and smart card
- Running a PKI: how a certificate authority actually operates
- Federated identity: OAuth2, OIDC, and SAML, untangled
- Key ceremonies and the HSM key hierarchy: where every payment key comes from
- PIN blocks: encrypting a 4-digit number like it's a nuclear launch code
- DUKPT: a fresh key for every card payment at the counter
- Code signing: proving who shipped a binary, and what it can't prove
- Secure boot: a chain of signatures from the first instruction to the OS
- BYOK and HYOK: who really controls your cloud encryption keys
8 standards pages · 163 min
- NIST: the standards body behind AES, SHA, and post-quantum cryptography
- The IETF: RFCs and the protocols the internet actually runs
- ISO/IEC: the paywalled standards behind ISMS certification and algorithm testing
- OASIS: where the identity and PKI-token standards actually get written
- EMVCo & PCI SSC: the industry bodies behind chip cards, CVVs, and compliance
- FIPS 140-3 and the CMVP: what 'FIPS validated' actually means
- Common Criteria (ISO/IEC 15408): evaluating products against the claims they choose
- ETSI and eIDAS: qualified signatures, trust services, and the EU Digital Identity Wallet
– reviewed
Comprehensive, no filtering
Researcher / Academic
Open the full catalog. Every module, in order, with no persona filtering.
First win: Start at the very beginning · 28 min, then 28 modules · 674 min
28 Learn modules · 674 min
- The history and purpose of cryptography
- The math underneath: modular arithmetic & one-way functions
- Symmetric-key cryptography & AES
- The Data Encryption Standard (DES)
- Stream ciphers & ChaCha20-Poly1305
- Message authentication codes: HMAC, CMAC, GMAC & Poly1305
- Modes of operation & AEAD: ECB, CBC, CTR, GCM & ChaCha20-Poly1305
- RSA & public-key cryptography
- RSA padding: OAEP, PKCS#1 v1.5, and why raw RSA fails
- Elliptic Curve Cryptography (ECC / ECDSA)
- Diffie-Hellman key exchange
- The ElGamal cryptosystem
- Hash functions & digital signatures
- Password hashing & key derivation: PBKDF2, bcrypt, scrypt, Argon2
- X.509 certificates & the PKI trust hierarchy
- JSON Web Tokens & API authentication
- Passkeys & WebAuthn
- SSH: key exchange, host keys, and authentication
- TLS in practice: how HTTPS puts it all together
- End-to-end encrypted messaging: the Signal Protocol
- Key sizes & security levels: what the numbers mean
- Random number generation: the primitive everything else depends on
- Entropy: measuring, estimating, and testing true randomness
- Side-channel & timing attacks: when the math is fine but the implementation isn't
- Cryptography inside blockchains: hashing, Merkle trees, and signatures
- Shamir's Secret Sharing
- Why quantum computers break this: Shor's algorithm
- Harvest now, decrypt later: the risk that's already here
15 use cases · 288 min
- Envelope encryption: how a KMS actually protects your data
- Key wrapping and key exchange: moving keys without ever exposing them
- PKCS#11: the standard behind every HSM and smart card
- Running a PKI: how a certificate authority actually operates
- Federated identity: OAuth2, OIDC, and SAML, untangled
- Key ceremonies and the HSM key hierarchy: where every payment key comes from
- PIN blocks: encrypting a 4-digit number like it's a nuclear launch code
- CVV/CVC: the three digits that never survive an authorization
- EMV chip authentication: the conversation behind every chip transaction
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Tokenizing card numbers and SSNs with format-preserving encryption
- DUKPT: a fresh key for every card payment at the counter
- Code signing: proving who shipped a binary, and what it can't prove
- Secure boot: a chain of signatures from the first instruction to the OS
- BYOK and HYOK: who really controls your cloud encryption keys
8 standards pages · 163 min
- NIST: the standards body behind AES, SHA, and post-quantum cryptography
- The IETF: RFCs and the protocols the internet actually runs
- ISO/IEC: the paywalled standards behind ISMS certification and algorithm testing
- OASIS: where the identity and PKI-token standards actually get written
- EMVCo & PCI SSC: the industry bodies behind chip cards, CVVs, and compliance
- FIPS 140-3 and the CMVP: what 'FIPS validated' actually means
- Common Criteria (ISO/IEC 15408): evaluating products against the claims they choose
- ETSI and eIDAS: qualified signatures, trust services, and the EU Digital Identity Wallet
– reviewed
New to cryptography
Curious Explorer
Your browser's padlock icon runs on math you use every day without seeing. Here's what's actually happening behind it.
First win: What happens when you visit a website · 24 min, then 9 modules · 271 min
9 Learn modules · 271 min
- The history and purpose of cryptography
- The math underneath: modular arithmetic & one-way functions
- Symmetric-key cryptography & AES
- RSA & public-key cryptography
- TLS in practice: how HTTPS puts it all together
- Hash functions & digital signatures
- Passkeys & WebAuthn
- Cryptography inside blockchains: hashing, Merkle trees, and signatures
- End-to-end encrypted messaging: the Signal Protocol
5 use cases · 91 min
- Federated identity: OAuth2, OIDC, and SAML, untangled
- CVV/CVC: the three digits that never survive an authorization
- EMV chip authentication: the conversation behind every chip transaction
- 3-D Secure and tokenization: protecting a transaction that never touches a chip
- Secure boot: a chain of signatures from the first instruction to the OS
– reviewed
No profile, no highlighting
Everyone
Not sure, or don't want to commit? The default view shows the whole catalog with nothing singled out: all 28 Learn modules, 15 use cases and 8 standards pages.
– reviewed