No experience, but I wrote &quot;I hear good things about Cryptography Engineering&quot;.<p>That said, at least one colleague was much happier with Security Engineering (also available for free online, and the non-crypto parts age well). Security Engineering doesn&#x27;t teach you hard crypto (much), but does teach threat modelling and presents various solutions.