cryptography
Safeguard articles tagged "cryptography" — guides, analysis, and best practices for software supply chain and application security.
67 articles
How to Hash a Password in Java the Right Way in 2025
To hash a password in Java, use a slow, salted, adaptive algorithm like bcrypt or Argon2 — never a raw SHA or MD5 digest. This guide shows working code and the tuning that actually matters.
CVE-2023-5363 Explained: The OpenSSL Key and IV Length Flaw
CVE-2023-5363 is an OpenSSL bug where key and IV length parameters get processed too late, risking confidentiality in GCM, CCM and OCB modes. Here is who is affected and how to fix it.
An Asymmetric Encryption Example, Explained for Developers
A concrete asymmetric encryption example using RSA key pairs, plus how public-key cryptography secures TLS, signing, and the code you ship.
What Makes an Encryption Algorithm Symmetric?
An encryption algorithm is symmetric when the same secret key both encrypts and decrypts the data. That single property shapes its speed, its use cases, and its one hard problem.
What Is Hashing? A Plain-English Guide to One-Way Functions
Hashing turns any input into a fixed-size fingerprint that cannot be reversed. It quietly powers password storage, integrity checks, and digital signatures across modern software.
Cryptographic Bill of Materials (CBOM): The Next Frontier
Post-quantum cryptography migration requires knowing what cryptographic algorithms your software uses. CBOMs provide that inventory. Here is what they are and why they matter.
Cryptography Misuse Detection: Griffin AI vs Mythos
Crypto misuse is not about broken algorithms. It is about misused parameters, missing checks, and the gap between "it compiles" and "it is secure."
Merkle tree in transparency logs
A Merkle tree is a hash-based data structure that lets transparency logs prove data integrity efficiently, using Merkle proofs and certificate transparency.
Certificate transparency log
A concrete guide to certificate transparency logs: how SCTs verify issuance, how CT monitoring works, and how rogue certificates get detected fast.
PASETO tokens
PASETO tokens explained: what is PASETO, how PASETO vs JWT differs, and why platform-agnostic security tokens with versioned crypto are safer by design.
Post-Quantum Cryptography Migration for Software Supply Chains
NIST finalized ML-KEM, ML-DSA, and SLH-DSA in 2024. Here's what it means for Sigstore, package registry signing, TLS, and the harvest-now-decrypt-later problem.
Hash collision attack
What is a hash collision, and why does it break integrity checks and signatures? A precise definition, the SHA-1 collision attack, and how Safeguard closes the gap.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.