Here to second that recommendation. Steve Bellovin wrote a review of "Between Silk and Cyanide" back on the old cryptography@c2.net mailing list that prompted

Here to second that recommendation. Steve Bellovin wrote a review of "Between Silk and Cyanide" back on the old cryptography@c2.net mailing list that prompted me to buy the book: https://www.mail-archive.com/cryptography@c2.net/msg04572.html https://www.mail-archive.com/cryptography@c2.net/msg04572.ht... (The whole thread is good, BTW.) The seriousness of the topic really left a mark with me (thinking about agents being tortured and killed as a result of poor opsec or cryptographic vulnerabilities). I'm glad that the work I do doesn't have those consequences.