Cryptography is imperative as a security control, but improper use of cryptography can create exploitable vulnerabilities in mobile devices and apps. This section looks at cryptography-related vulnerabilities involving both general practices and certificates/digital signatures.