Head of customer solutions and security software engineer with ~10 years of experience in many languages and technologies, specialising in security engineering, data security and applied cryptography Anastasiia Voitova will present a talk on NoNameCon 2021!
This talk explains building DRM-like protection with end-to-end encryption using envelope encryption on ephemeral keys. We will discuss risks, threats, dataflow, cryptographic layer, key management and integration with traditional appsec controls for defense-in-depth approach.
**Tags**: blue team, security engineering, design of security controls, e2ee, cryptography, mobile and backend.