HKDF vs PBKDF2: which key derivation function fits which input, what NIST SP 800-108 Rev. 2 changes, and how to migrate.
Pick the wrong AES mode for a constrained radio chip and you burn silicon you don’t have. Pick the wrong one for a TLS-terminating load balancer and you leave throughput on the table. AES-GCM and ...