Exercises
# curated build projects that drill the security concepts hands-on.
❯ cat documents/
-
Cryptopals — crypto challenges (sets 1–3)
Exercise
2026-08-08
Implement then break real cryptography — XOR, AES modes, the padding oracle — the staged project that makes "just use a library" a lesson learned, not a slogan.
-
Cryptopals — crypto challenges (sets 1–3) — subject
Subject
2026-08-08
The staged work statement for Cryptopals sets 1–3 — build XOR, AES-ECB/CBC/CTR from primitives, then break them with the padding oracle — runnable offline against published test vectors.
-
Stand up your own CA + mTLS between two services
Exercise
2026-08-08
Run a private certificate authority, issue leaf certs, and require both sides to present one — the PKI trust chain and machine identity built with your own hands.
-
Stand up your own CA + mTLS between two services — subject
Subject
2026-08-08
The concrete lab spec for a private PKI — root + intermediate CA, leaf certs with SANs/EKUs, two toy services doing mutual TLS, and revocation — runnable offline with openssl or step-ca.