Define the adversary
Turn “encrypt this” into assets, trust boundaries, oracle access, winning events, and failure consequences.
threat modelsMove from calling cryptographic APIs to defining adversaries, reading security claims, tracing protocol assumptions, and recognizing where real implementations fail.
The book joins mathematical definitions to protocol and engineering boundaries instead of treating cryptographic primitives as isolated names.
Turn “encrypt this” into assets, trust boundaries, oracle access, winning events, and failure consequences.
threat modelsWork with indistinguishability, unforgeability, hybrid arguments, reductions, concrete loss, setup assumptions, and composition.
security gamesInspect nonce state, framing, canonicalization, replay, domain separation, parser ambiguity, key lifecycle, side channels, and migration.
engineeringEach part supplies prerequisites for the next. Follow the full route or use the accelerated and zero-knowledge-focused paths.
Threat models, security properties, Kryptos as a verification case study, and the classical cryptanalysis workbench.
Modular arithmetic, groups, fields, probability, entropy, birthday bounds, security games, and reductions.
AES, ChaCha20, AEAD, hashes, MACs, KDFs, RSA, Diffie–Hellman, ECC, and signatures.
HPKE, PKI, TLS 1.3, X3DH, Double Ratchet, HSM/KMS, sharing, and threshold signatures.
Commitments, Sigma protocols, R1CS, sumcheck, KZG, IPA, FRI, SNARKs, STARKs, recursion, and zkVMs.
Wallet security, incident analysis, cryptographic engineering, agility, and post-quantum migration.
Read the front matter, Preface, study guide, and Chapters 0–1 of the English v1.0.0-rc.4 edition before you buy.
Early Access is US$14.99 as a one-time purchase. Applicable taxes and currency conversion are shown at checkout.
After successful payment, download your files through Dodo Payments. Your delivery email provides access to your purchase.
Purchase includes the files available at the time of purchase. Automatic or lifetime updates are not promised. Simplified Chinese is experimental and excluded from this bundle.
This content-complete edition incorporates corrections from an invite-only Beta. It is an Early Access release candidate, not stable v1.0. AI-assisted tools contributed to drafting, translation, and editing; Kyle Wu is responsible for the published content. The book and companion code are educational, not production guidance. Independent peer review and a cryptographic audit are not claimed.
Paid Early Access v1.0.0-rc.4
After successful payment, Dodo Payments provides access to the purchased digital files and sends a delivery email. The bundle includes English PDF, EPUB, and Markdown, a Traditional Chinese companion candidate, and educational code. If you need help accessing your purchase, contact [email protected].
You receive the files available at the time of purchase. Automatic or lifetime updates are not promised. Material Early Access corrections may be provided at our discretion after verifying an eligible purchase. See the terms and refund policy.
It rebuilds prerequisites, but it aims beyond introductory API usage. High-school algebra and basic Python are helpful; the complete route is comparable to a demanding university self-study sequence.
No. Examples are educational. Some intentionally expose failure modes or use toy parameters. Real systems require reviewed libraries, deployment profiles, key management, test vectors, and independent security review.
Yes. AI-assisted tools contributed to drafting, organization, translation, and editing. Kyle Wu is responsible for the published content. This is not a claim of fully human translation, independent peer review, or cryptographic audit.
Readude is the independent digital publishing brand founded by Kyle Wu. It publishes serious ideas across technical and non-technical fields. readude.com is the canonical site.
v1.0.0-rc.4 is a content-complete release candidate incorporating corrections from the completed invite-only Beta. It is available to purchase now, but is not stable v1.0.0. Beta participation and automated checks do not constitute independent peer review, a cryptographic audit, or production-security approval.