Bruce Schneier's books explain that there is far more to security than better encryption. Most are implemented incorrectly or used incorrectly.