These guidelines are intended to help developers build secure software,
but they do not focus specifically on software that implements security features.
Therefore, topics such as cryptography are not covered in this document (see [9] and [10] for information on using cryptography with Java)