Also knowing the difference between authentication and authorization is crucial and should not be forgotten.

Usage of the slang "auth" is my current favorite indicator of complete cryptographic snakeoil.