Applied cryptography" by Bruce Schneier
is the 'bible' of cryprographers and
will provide all the theory you are likely
to need. It does not provide much in the
way of testing.
One of my research interests is security testing. If you'd like, I can share a few of
my preliminary findings.