On: Phil Zimmermann: Beware of Snake Oil Crypto (1997)

[tptacek]

Practical Cryptography (also known as Cryptography Engineering).

But read them to learn how to break cryptosystems, and then go do that. Don't read them and then try to build something. They're missing details too.