WebCrySIL - Web Cryptographic Service Interoperability Layer

Florian Reimair, Peter Teufl, Thomas Zefferer

2015

Abstract

Today’s applications need to work with a heterogeneous collection of platforms. Servers, desktops, mobile devices, and web browsers share data and workload. Many of these applications handle sensitive data or even have security as their core feature. Secure messaging, password storage, encrypted cloud storage applications or alike make use of cryptographic algorithms and protocols. These algorithms and protocols require keys. The keys in turn have to be provisioned, securely stored, and shared between various devices. Unfortunately, handling the keys and the availability of cryptographic APIs evokes non-trivial challenges in current heterogeneous platform environments. Also, the implementation of APIs supporting cryptographic protocols on arbitrary platforms require significant effort, which is a major challenge when new cryptographic protocols become available. Our approach, the Crypto Service Interoperability Layer (CrySIL), enables applications to securely store/use/share key material and supports a wide range of cryptographic protocols and algorithms on heterogeneous platforms. CrySIL complements existing solutions that mitigate the aforementioned problems through central services by allowing for more flexible deployment scenarios. In this work, we explain the motivation of CrySIL, describe its architecture, highlight its deployment in a typical heterogeneous application use case and reflect on achievements and shortcomings.

Paper Citation

in Harvard Style

Reimair F., Teufl P. and Zefferer T. (2015). WebCrySIL - Web Cryptographic Service Interoperability Layer . In Proceedings of the 11th International Conference on Web Information Systems and Technologies - Volume 1: WEBIST, ISBN 978-989-758-106-9, pages 35-44. DOI: 10.5220/0005488400350044

in Bibtex Style

@conference{webist15,
author={Florian Reimair and Peter Teufl and Thomas Zefferer},
title={WebCrySIL - Web Cryptographic Service Interoperability Layer},
booktitle={Proceedings of the 11th International Conference on Web Information Systems and Technologies - Volume 1: WEBIST,},
year={2015},
pages={35-44},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005488400350044},
isbn={978-989-758-106-9},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 11th International Conference on Web Information Systems and Technologies - Volume 1: WEBIST,
TI - WebCrySIL - Web Cryptographic Service Interoperability Layer
SN - 978-989-758-106-9
AU - Reimair F.
AU - Teufl P.
AU - Zefferer T.
PY - 2015
SP - 35
EP - 44
DO - 10.5220/0005488400350044