Encrypting your data while it is in transit, at rest, or in use is paramount to ensure the confidentiality of your data is protected. The same applies when hashing is used to assure the integrity of data so that it can be verified it has not been tampered with.
Using out-of-date cryptographic algorithms and protocols is usually a recipe for disaster that can result in data loss, financial liabilities, or damage to an organisation’s reputation.
Get a review and advice on all things crypto related.
It is often too easy to configure things in such a way that detrimentally affects the goal of protecting data and systems, be it in terms of confidentiality, integrity, authentication, and non-repudiation.
Selecting the correct primitives for an intended outcome requires good understanding of cryptographic fundamentals, so that the appropriate algorithms are used, considering factors like strength, security, and compliance with standards.
Effective key management ensures that keys are generated securely with enough entropy, kept secret, are available when needed, and are used properly throughout their lifecycle to secure data.
This usually involves a lot of documentation and familiarity with the processes to ensure there is an auditable trail to assure the integrity of how keys were used from cradle to grave, and that they are offering the expected level of protection for data.
Quantum computing capabilities are coming and organisations need to start thinking about early planning and migration to post-quantum cryptography (PQC). Implementing and switching to the latest algorithms is not something that can happen quickly in most industries, due to vendor support, library implementations and legacy applications.
Roadmaps and planning need to occur to ensure your organisation can stay up-to-date with the latest guidance to keep your data (and your customer’s data) secure.
Ensure algorithms and protocols are appropriately protecting your sensitive data
Review how the lifecycle of keys is managed to prevent unauthorized access or compromise
Ensure you know what each key is protecting and what is downstream from it if compromised
Ensure that cryptographic processes are appropriately documented, in particular for recovery
Alignment with industry standards such as NIST, PCI-DSS, PCI-PIN and best practice
Future proofing your cryptographic operations against attacks in the future
Obtain advice on key management, types of encryption or appropriate hashing algorithms for your next project to ensure your data is protected
