Mission Impossible: Common Cryptography at Scale in a Diverse Enterprise

Cryptography is hard! Protocols are hard! Cyber Security is hard! All these are hard enough on their own and must be done correctly in a single product. But, how do you ensure quality, correctness and stay up to date across a diverse portfolio of products that are deployed globally? Can we have a common library that meets most of our needs? Can we support it (given it's hard)? How do we stay current? This talk will examine: 1 - Why would one want to attempt this? What are the benefits? 2 - How could someone go about this (some helpful strategies). 3 - Sounds great - what are the pitfalls? 4 - Success stories. 5 - Lessons learned (not success stories). 6 - Conclusion (Is it impossible?) 7 - Questions?