How Meta built large-scale cryptographic monitoring

What this post added

Introduced a large-scale cryptographic monitoring system for FBCrypto, Meta's managed cryptographic library. This system uses a buffering and flushing strategy to aggregate cryptographic events without sampling, minimizing performance impact. Optimizations include partially randomized flushing for uniform write throughput and aggregation of derived crypto operations under parent keys. The monitoring provides deep visibility into cryptography usage, enabling proactive mitigation of security vulnerabilities, setting cryptographic maturity standards, and supporting PQC migration.