OWASP Cryptographic Storage Cheat Sheets

Official docs outline

Architectural Design
Where to encrypt and minimizing stored sensitive data.
Algorithms
Approved ciphers, custom algorithm risks and post-quantum considerations.
Cipher Modes
AES-GCM and authenticated encryption versus ECB/CBC.
Secure Random Number Generation
CSPRNG use for keys, IVs and tokens.
Key Management
Key generation, lifetimes, rotation and storage.
Key Management Cheat Sheet
Detailed key lifecycle and KMS guidance.
Transport Layer Security
TLS versions, cipher suites and certificate practices.
HTTP Strict Transport Security
HSTS header and preload.
Pinning
Certificate and public-key pinning tradeoffs.
Post-Quantum Cryptography
Planning migration to quantum-resistant algorithms.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.