Jon Green, CTO, Aruba Government Solutions, Aruba, a Hewlett Packard Enterprise Company. There are many sessions at ICMC about validation of crypto. And while validated crypto is certainly valuable, too many users of cryptographic products equate the FIPS 140-2 stamp of approval with “secure product”. But experience shows that this is not a valid equivalence, and in this session we’ll explore the hilarious (and perhaps depressing) ways that product developers have taken perfectly good crypto technology and messed it up. Names will be changed to protect the guilty!