Security/crypto hardening for system administrators [pdf]
bettercrypto.org