When designing an application that stores sensitive PII, which cryptographic design choice is the most secure?
Trap 1: Developing a custom symmetric encryption algorithm for maximum…
Custom algorithms are rarely secure and prone to error.
Trap 2: Storing the encryption key in the same database table as the data.
This is a major security design failure.
Trap 3: D
Encoding is not security.
- A
Using established, peer-reviewed cryptographic libraries like libsodium or Tink.
These libraries are tested against side-channel and implementation attacks.
- B
Developing a custom symmetric encryption algorithm for maximum secrecy.
Why wrong: Custom algorithms are rarely secure and prone to error.
- C
Storing the encryption key in the same database table as the data.
Why wrong: This is a major security design failure.
- D
D
Why wrong: Encoding is not security.
- E
Using base64 encoding to 'obscure' the data.
Why wrong: Encoding is not security; it is easily reversible.