Explain how you would implement encryption for data at rest and data in transit. Cover key management, algorithm selection, and common pitfalls in implementing cryptography.

Sample answer preview

Implementing encryption correctly requires understanding both the cryptographic primitives and the operational practices around key management. Let me cover both aspects comprehensively. For data in transit, TLS, or Transport Layer Security, is the standard.