Foundations, Cryptography, Identity, and Authorization
Module Readiness: Learner-ready
The complete concept, adversarial practice, assessment, transfer, and source-routing path is available.
Selective Reading Rule
The guide is the primary teacher. Full-book reading is not required; use the module reading guide and linked standards or primary sources to resolve a named question.
Competency
Model adversaries and assets; use cryptographic primitives through safe protocols and libraries; design authentication, sessions, authorization, and key lifecycle.
Required Evidence
- asset inventory
- protocol analysis
- authorization matrix
- key-rotation drill
Completion Gate
Reproduce the threat or failure, implement the control, verify it with negative evidence, and state the remaining risk. Scanner output without triage does not count.
Source Policy
Use current official standards and curated local book routes selectively. The completed guide must remain the primary teacher.