From encryption to digital signatures to electronic commerce to secure voting cryptography has become the enabling technology that allows us to take existing business and social constructs and move them to computer networks. But a lot of cryptography is bad, and the problem with bad cryptography is that it looks just like good cryptography; most people cannot tell the difference. Security is a chain: only as strong as the weakest link. In this talk I'll examine some of the common mistakes companies make implementing cryptography, and give tips on how to avoid them.