This is old, and widely recommended against (e.g. https://sockpuppet.org/blog/2013/07/22/applied-practical-cryptography/ https://sockpuppet.org/blog/2013/07/22/

This is old, and widely recommended against (e.g. https://sockpuppet.org/blog/2013/07/22/applied-practical-cryptography/ https://sockpuppet.org/blog/2013/07/22/applied-practical-cry..., if you trust tptacek.) It's still a good reference manual for 90's crypto, and very useful if you want to know what mistakes to expect when reviewing crypto code; but you really shouldn't read the book as a handbook unless you have enough knowledge to spot the many, many parts that will lead you astray. (tptacek's page, linked earlier, has a bit of an overview.)