Cryptography is built into almost every modern application, but developers and testers are often asked to trust it as a black box. That makes design mistakes hard to see, implementation failures easy to miss, and security claims difficult to prove. This course gives beginner developers and QA engineers a practical way to understand and test the cryptography used in real software. You will learn what encryption, hashing, digital signatures, certificates, TLS, JWTs, password hashing, keys, IVs, and nonces actually guarantee. You will also learn where those guarantees stop.
The course includes 35 video lectures and a local 17-mission activity kit. The kit runs in your terminal with Python 3.11 or newer. It needs no virtual machine, cloud account, production credentials, or access to a live system. You will inspect evidence, make security decisions, repair selected Python defects, run deterministic checkers, and keep a record of what your tests proved. You will work through practical cases involving AES-GCM, nonce reuse, file integrity, password-reset races, private-key handling, signature policy, TLS evidence, JWT validation, crypto code review, incident regression tests, and post-quantum migration planning.
