To expand on this, here are a few mistakes that I caught while scrolling quickly: > For production applications some AES variant or RC4 would be a better choic

To expand on this, here are a few mistakes that I caught while scrolling quickly: > For production applications some AES variant or RC4 would be a better choice. RC4 is not at all a good choice for new applications[1]. > SHA1 SHA-1 is broken (although not as badly as MD5). SHA-2 or SHA-3 should be preferred. > 800-bit RSA 800 bits is alarmingly low. Browsers are currently upgrading from 1024-bit certificates[2]. [1] http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html http://blog.cryptographyengineering.com/2013/03/attack-of-we... [2] https://blog.mozilla.org/security/2014/09/08/phasing-out-certificates-with-1024-bit-rsa-keys/ https://blog.mozilla.org/security/2014/09/08/phasing-out-cer...