I'm a programmer and I'm working on a Single Sign-on project using SAML. I want to do all I can to make this as secure as possible. Since making a secure Single Sign-on/SAML solution requires signing xml messages over https and creating various keys/certs etc etc I think I better know about this stuff! I don't want to learn how to be a cryptographer, just know how to properly select the right cryptography method for this project and future projects.
I tend to like to find a few GOOD books and then watch some lectures/talks about a subject so I can really dive into what I'm learning so I can actually grasp all the new vernacular.
So far I bought "Network Security with OpenSSL" and I'm reading it but I have to admit some of the stuff is going over my head.
If your an openssl, public/private key making guru, what helped you get to that level?!? :D