Practical Cryptography by Bruce Schneier and Niels Ferguson is decent in that it gives a good lay of the land without diving too deep in to the mathematical rigor. The first half explains at a high level the concepts of encryption,…
…here, I want to note that the "new Threat Modeling" is a bit controversial, the terms are still up in the air, and if you want to learn more about security, you'd be far better off reading Ferguson's "Practical Cryptography" and McDonald, Dowd, and Schuh's "Art of Software Security Assessment". Don't build obstacle courses. Design stuff that works.
Throw that book away, and buy Ferguson and Schneier's "Practical Cryptography", which Schneier contributed to in penance for writing "Applied Cryptography". Portions of the proceeds of "Practical Cryptography" are donated to a fund that helps the people who wrote crypto based on…
I strongly recommend this book in advance based on the fact that Ferguson is the lead author, and it's based on _Practical Cryptography_, which itself almost (but not completely) atones for _Applied Cryptography_.
…an informal requirement (a software developer needs to know what the client wishes the software to do). This leads to sharing my favourite definitions of requirements and specifications; they are from Practical Cryptography by Niels Ferguson and Bruce Schneier. Chapter 9, Pages 131-132. "Requirements Requirements are an informal description of what the program is supposed to achieve. It is really a "what can I do with…
How about Practical Cryptography (http://www.amazon.com/Practical-Cryptography-Niels-Ferguson/...) as a quick-guide over the more verbose Applied Cryptography which is much older than the former?
布鲁斯·施奈尔和尼尔斯·弗格森合著的《实用密码学》还不错，它能帮你建立全局观，又不会陷进过深的数学推导里。前半部分从高层次解释了加密的概念，……
Practical Cryptography by Bruce Schneier and Niels Ferguson is decent in that it gives a good lay of the land without diving too deep in to the mathematical rigor. The first half explains at a high level the concepts of encryption,…
……在这里，我想指出“新威胁建模”有点争议，相关术语也还没定论，如果你想深入学习安全，去读弗格森的《实用密码学》以及麦克唐纳、道德和舒赫合著的《软件安全评估的艺术》要有用得多。别整那些障碍赛道，设计管用的东西才是正道。
…here, I want to note that the "new Threat Modeling" is a bit controversial, the terms are still up in the air, and if you want to learn more about security, you'd be far better off reading Ferguson's "Practical Cryptography" and McDonald, Dowd, and Schuh's "Art of Software Security Assessment". Don't build obstacle courses. Design stuff that works.
把那本书扔了吧，去买弗格森和施奈尔写的《实用密码学》，那是施奈尔为了赎自己当年写《应用密码学》的罪才参与合著的。《实用密码学》的部分收益还会捐给一个基金会，专门用来资助那些当年照着……写密码学代码的人。
Throw that book away, and buy Ferguson and Schneier's "Practical Cryptography", which Schneier contributed to in penance for writing "Applied Cryptography". Portions of the proceeds of "Practical Cryptography" are donated to a fund that helps the people who wrote crypto based on…
基于弗格森是第一作者，而且这本书是基于《实用密码学》写成的，我提前强烈推荐它。《实用密码学》本身几乎（但还没完全）赎清了《应用密码学》犯下的过错。
I strongly recommend this book in advance based on the fact that Ferguson is the lead author, and it's based on _Practical Cryptography_, which itself almost (but not completely) atones for _Applied Cryptography_.
……一个非正式的需求（软件开发者需要知道客户希望软件做什么）。这让我想分享一下我最喜欢的关于需求和规格说明书的定义；它们来自尼尔斯·弗格森和布鲁斯·施奈尔合著的《实用密码学》第9章，第131-132页。“需求：需求是对程序旨在实现的目标的非正式描述。它本质上是‘我能用……做什么’
…an informal requirement (a software developer needs to know what the client wishes the software to do). This leads to sharing my favourite definitions of requirements and specifications; they are from Practical Cryptography by Niels Ferguson and Bruce Schneier. Chapter 9, Pages 131-132. "Requirements Requirements are an informal description of what the program is supposed to achieve. It is really a "what can I do with…
用《实用密码学》（http://www.amazon.com/Practical-Cryptography-Niels-Ferguson/...）作为速查指南，来替代比它老得多的冗长版《应用密码学》，怎么样？
How about Practical Cryptography (http://www.amazon.com/Practical-Cryptography-Niels-Ferguson/...) as a quick-guide over the more verbose Applied Cryptography which is much older than the former?