[teambob]

The 'how' of encryption is often quite simple - it is 'why' that is difficult

[reitanqild]

Or the other way around?

Example: We all know why we should protect against timing attacks. How to get it right is the harder part.