Building crypto systems is also hard. You write about passing hash digest. Makes me think about pass the hash vuln in windows NTLM where if someone grabs the

Building crypto systems is also hard. You write about passing hash digest. Makes me think about pass the hash vuln in windows NTLM where if someone grabs the hash they don’t need to know the pass anymore because they can pass the hash. The same you still can use AES or RSA incorrectly so that whatever you built on top of those is vulnerable if you don’t have experience. OK TFA explains all I have the same view on topic as author.