arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2108.07211cs.CRcs.SE
收藏

FluentCrypto:简易模式下的加密

FluentCrypto: Cryptography in Easy Mode

Simon Kafader, Mohammad Ghafari

摘要:

研究表明,加密概念对于开发人员来说很难理解,并且加密API的安全使用对于主流开发人员来说具有挑战性。我们开发了一个名为FluentCrypto的流畅API,以简化Node.js JavaScript运行时环境中加密技术的安全和正确采用。它提供了一个基于任务的解决方案,即,它隐藏了涉及使用本机Node.js加密API的低级复杂性,并且它依赖于加密专家指定的规则来确定API的安全配置。我们进行了初步研究,发现即使对于缺乏密码学知识的开发人员来说,FluentCrypto也很难被滥用,并且与标准的Node.js加密API相比,它更容易为开发人员使用,并帮助他们在更短的时间内开发出安全的解决方案。

英文摘要:

Research has shown that cryptography concepts are hard to understand for developers, and secure use of cryptography APIs is challenging for mainstream developers. We have developed a fluent API named FluentCrypto to ease the secure and correct adoption of cryptography in the Node.js JavaScript runtime environment. It provides a task-based solution i.e., it hides the low-level complexities that involve using the native Node.js cryptography API, and it relies on the rules that crypto experts specify to determine a secure configuration of the API. We conducted an initial study and found that FluentCrypto is hard to misuse even for developers who lack cryptography knowledge, and compared to the standard Node.js crypto API, it is easier to use for developers and helps them to develop secure solutions in a shorter time.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑