01
Hashing and signing
A digest identifies bytes only when its expected value is trusted; a signature or MAC requires correctly managed keys.
Life / Keys / Signatures / Protocols
Cryptography
Practical cryptography notes about key provenance, message binding, replay resistance, and the difference between verification and authorization.
Try this / Practical field guide
Signed-request protocol review
An educational design checklist, not a completed cryptographic audit or production signature library.
- Specify the exact bytes to authenticate: method, path, body hash, operation ID and protocol version.
- Select a vetted signing or MAC library and document how the verifier trusts the key.
- Define freshness and single-use replay checks separately from signature verification.
- Change a signed field, replay the message, and rotate a key; write down the expected rejection.
- Check user and object authorization separately: a valid signature does not grant access.
A space for the things I want to share
Inside this collection
02
Key lifecycle
Design for creation, storage, rotation, revocation, algorithm selection and environment separation.
03
Protocol design
Specify byte-level encoding, domain separation, freshness, message binding and verification order.
Hands-on resources & related guides
Stories / Notes / Work in progress
Notes & stories
The first note belongs here.
No personal cryptography stories have been published in this collection yet. This section automatically fills with my own approved posts, notes, recipes, or build logs as I add them.
Visit the Life notebookPhotography / Original media
Photos & visual notes
A spot for the first photograph
Original photos only, with descriptive captions
Stories behind the images
Details and context, not stock or invented travel photos
Photo entries appear automatically after original pictures and captions are approved and added to the Life notebook.
Already on the site / Related material