Cryptography & Security Fundamentals
Signature Course No. 160 — A Signature AI Socratic Coaching Course.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's Cryptography & Security Fundamentals course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
This is the course for security-track staff — analysts, engineers, and administrators who operate systems that rely on cryptography daily and need to understand what they are operating, not just which buttons enable it — for IT practitioners moving toward security roles, who already meet certificates, TLS errors, key stores, and password databases in their work, and for technical leads and reviewers who must judge vendor claims, approve designs, and sign off on statements other people will rely on.
It works in two modules. First, Module 1 — The Primitives and What Each One Actually Guarantees — work through Concepts 1–9, finishing with The Primitive Audit; then, Module 2 — Keys, Channels, and the Judgment Calls — work through Concepts 10–18, finishing with The Key-and-Channel Plan.
You finish by proving the whole course — in The Primitive Audit and in The Key-and-Channel Plan. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies, hands-free. In this course the Voice Coach is not an extra — explaining to a manager why a signed file settles a dispute, or to a client what encryption does not cover, are spoken acts.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. Learners who already know the material can test out concept by concept.
Every worked example is computed step by step, so you can check each figure yourself — and the small toy examples, a shift cipher, a letter-sum checksum, a key exchange with tiny numbers, are labeled as toys wherever they appear. The toy shows the shape; real algorithms differ in strength, not in the shape of the guarantee.
This course teaches cryptography itself — the primitives, keys, certificates and TLS, and the judgment calls around them. It makes only standard, textbook-level claims: it invents no algorithm properties, states no equivalences between key lengths of different kinds, and asserts no compliance mandates. Where practice varies between organizations or is actively evolving, it says so and points you to current standards guidance.
Both capstones produce real artifacts — a primitive-by-primitive audit of a records firm's security claims, closing in a corrected guarantee schedule, and a key-and-channel plan for the same firm under a compromise scenario, closing in a guarantee statement a manager can sign — written to be usable on the real job, not just in the course.
This is the one hundred and sixtieth course in The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning has delivered since 2002.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with the four guarantees. A security claim is only as good as the primitive underneath it — and every primitive guarantees less than the sentence built on it. Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Primitive Audit for Module 1 and The Key-and-Channel Plan for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Cryptography is the machinery underneath almost every security promise a business makes. "Your files are encrypted." "This connection is secure." "That document was signed." Each of those sentences rests on a small set of primitives — a handful of mathematical tools with precise, limited guarantees.
This course teaches those primitives one at a time, in plain language, with the limits attached: what symmetric encryption does and does not prove, why a hash is not an encryption, what a digital signature can settle in a dispute and what it cannot, how two parties who have never met build a shared secret on an open network, and why the strongest algorithm in the world fails when its key sits in the wrong drawer.
Then it turns to practice: certificates and TLS, the full life of a key from generation to destruction, rotation and compromise, passwords stored properly, algorithm choice over long horizons, and the implementation mistakes where real systems actually break.
You will finish able to read a vendor's security claim the way an auditor reads it — primitive by primitive, guarantee by guarantee — and to make, document, and defend cryptographic decisions of your own.
What you will learn
- State what each core primitive — symmetric encryption, asymmetric encryption, hashing, message authentication, digital signatures — guarantees, and what it does not
- Explain how key exchange, certificates, and TLS combine the primitives into a working secure channel
- Judge cryptographic strength in terms of key space and attack model, not adjectives
- Run the key lifecycle properly: generation, storage, custody, rotation, revocation, and response to compromise
- Store passwords correctly, with salts and slow hashing, and explain why each element is there
- Choose algorithms for a stated horizon, plan for deprecation and migration, and refuse home-built cryptography
- Write a bounded guarantee statement — what a design protects, against whom, and what it leaves open — and defend it
Everything in the course
- All 18 concepts of Cryptography & Security Fundamentals, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Primitive Audit and The Key-and-Channel Plan
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for the practitioner who has to state guarantees precisely
Cryptography & Security Fundamentals is for security-track staff — analysts, engineers, and administrators on a security career path — who operate systems that rely on cryptography daily and need to understand what they are operating, not just which buttons enable it, IT practitioners moving toward security roles — who already meet certificates, TLS errors, key stores, and password databases in their work and want the concepts underneath the tooling,
and technical leads and reviewers — who must judge vendor claims, approve designs, and sign off on statements about encryption, signing, and key handling that other people will rely on.
Every guarantee in this course is stated with its condition attached — confidential, if the key stays secret; authentic, if the verification actually happens; intact, if anyone compares the fingerprint. A security claim with no condition attached is not a stronger guarantee. It is a weaker speaker.
This is a Risk, Safety & Compliance course. It assumes comfort with ordinary workplace technology and basic arithmetic — you will compute small key-space sizes and follow one small modular-arithmetic example, both shown step by step. It assumes no mathematics degree and no prior security certification.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with The Primitive Audit
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
More Signature Courses are coming
Cryptography & Security Fundamentals is Signature Course No. 160. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.