Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

From Struggle to Simplicity with a Usable and Secure API for Encryption in Java

Ehsan Firouzi, Ammar Mansuri, Mohammad Ghafari, Maziar Kaveh

TL;DR

SafEncrypt is an API that streamlines encryption tasks for Java developers, built on top of the native Java Cryptography Architecture, and it shields developers from crypto complexities and erroneous low-level details.

Abstract

Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use for developers, and static analysis tools do not detect every misuse. We developed SafEncrypt, an API that streamlines encryption tasks for Java developers. It is built on top of the native Java Cryptography Architecture, and it shields developers from crypto complexities and erroneous low-level details. Experiments showed that SafEncrypt is suitable for developers with varying levels of experience.

From Struggle to Simplicity with a Usable and Secure API for Encryption in Java

TL;DR

SafEncrypt is an API that streamlines encryption tasks for Java developers, built on top of the native Java Cryptography Architecture, and it shields developers from crypto complexities and erroneous low-level details.

Abstract

Cryptography misuses are prevalent in the wild. Crypto APIs are hard to use for developers, and static analysis tools do not detect every misuse. We developed SafEncrypt, an API that streamlines encryption tasks for Java developers. It is built on top of the native Java Cryptography Architecture, and it shields developers from crypto complexities and erroneous low-level details. Experiments showed that SafEncrypt is suitable for developers with varying levels of experience.
Paper Structure (29 sections, 1 figure, 6 tables)

This paper contains 29 sections, 1 figure, 6 tables.

Table of Contents

  1. Introduction
  2. Related Work
  3. Developer Challenges
  4. Methodology
  5. Results
  6. Key Initialization
  7. Initialization Vector (IV)
  8. Padding & Encoding
  9. Encryption Mode.
  10. Key transmission
  11. Discussion
  12. Security.
  13. Interoperability.
  14. Exceptions
  15. SafEncrypt
  16. ...and 14 more sections

Figures (1)

  • Figure 1: Average Time and Difficulty for Different Tasks