No experience, but I wrote "I hear good things about Cryptography Engineering". That said, at least one colleague was much happier with Security Engineering (a

No experience, but I wrote "I hear good things about Cryptography Engineering". That said, at least one colleague was much happier with Security Engineering (also available for free online, and the non-crypto parts age well). Security Engineering doesn't teach you hard crypto (much), but does teach threat modelling and presents various solutions.