# Practical Cryptography Recommendations for Developers

DevFeed: [Practical Cryptography Recommendations for Developers](<https://devfeed.tech/articles/cryptographic-right-answers-29193.md>)

Original publisher: [Read original article](<https://www.latacora.com/blog/cryptographic-right-answers/>)

Published: 2018-04-03T19:25:00Z

Content type: opinion

Language: en

Sources: [Latacora](<https://devfeed.tech/sources/latacora.md>)

Topics: [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Security](<https://devfeed.tech/topics/security.md>), [ChaCha](<https://devfeed.tech/topics/chacha-cipher.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Embedded Systems](<https://devfeed.tech/topics/embedded-systems.md>)

Tags: [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [hmac](<https://devfeed.tech/tags/hmac.md>), [password](<https://devfeed.tech/tags/password.md>), [security](<https://devfeed.tech/tags/security.md>), [stream](<https://devfeed.tech/tags/stream.md>)

## AI overview

The article gives conservative cryptography guidance for developers, recommending simple, conventional, analyzable choices. It discusses authenticated encryption, password AKEs, KMS, ChaCha20-Poly1305, AES-GCM, and nonce management, while noting that more specialized systems may require different designs.

## Source excerpt

We're less interested in empowering developers and a lot more pessimistic about the prospects of getting this stuff right. There are, in the literature and in the most sophisticated modern systems, "better" answers for many of these items. If you're building for low-footprint embedded systems, you can use STROBE and a sound, modern, authenticated encryption stack entirely out of a single SHA-3-like sponge constructions. You can use NOISE to build a secure transport protocol with its own AKE. Speaking of AKEs, there are, like, 30 different password AKEs you could choose from.