"most security failures in its area of interest are due to failures in implementation, not failure in algorithms or protocols" ~The NSA~ Do [blink]*not*[/blink] store the key on the same machine as the encrypted data Do *never* store passwords, unless hashed