Reading the Lock

Reading the Lock
Practical Cryptography for Encryption, Keys, Digital Signatures, Secure Messaging, and Post-Quantum Security
By Evelyn Batungbacal
Encryption is everywhere. It protects your browser sessions, phone, passwords, payments, cloud files, messages, software updates, and digital identity. Yet the word encrypted often gets used as if it settles every security question.
It does not.
Reading the Lock gives you the practical cryptographic literacy to ask what actually matters: What is protected? Where does plaintext appear? Who holds the keys? How is identity verified? What happens when a device is lost, a key leaks, or a certificate expires?
Written for readers who want real understanding without drowning in advanced mathematics, this book turns cryptography into a system you can reason about.
Inside, you will learn how to:
— Separate confidentiality, integrity, authentication, and digital-signature evidence.
— Understand symmetric and public-key cryptography without hand-waving.
— See why Caesar, Vigenere, and the one-time pad still teach useful lessons about modern security.
— Understand AES, RSA, elliptic-curve systems, hashes, MACs, and digital signatures.
— Follow the key lifecycle from secure generation through storage, rotation, revocation, backup, and destruction.
— Distinguish transport encryption, encryption at rest, and true end-to-end encryption.
— Read HTTPS and TLS claims without assuming the padlock icon means the whole system is safe.
— Understand password hashing, salts, key derivation, passkeys, certificates, and signed software updates.
— Recognize side channels, implementation leaks, weak recovery paths, and other failures that bypass strong mathematics.
— Make sense of the post-quantum transition, including ML-KEM, ML-DSA, SLH-DSA, cryptographic agility, and the migration work organizations face now.
— Evaluate cryptographic libraries and APIs without inventing dangerous custom constructions.
— Use safe, authorization-based exercises to inspect real security boundaries on systems you own or manage.
The book also includes a practical reference section with a cryptography checklist, a key-management checklist, incident questions for suspected key compromise, and a plain-English glossary covering the terms you will meet in security documentation.
Cryptography becomes much easier to judge once you stop asking whether a product “uses encryption” and start asking what the encryption actually covers.
Reading the Lock shows you how to make that shift.
If you work with sensitive data, manage software or cloud systems, evaluate vendors, care about digital privacy, or simply want to understand the security technology you use every day, this book gives you a working mental model you can carry into the next system you encounter.