OpenSSL 기반 사용자 지정 암호 프로토콜 구현 방안
Custom Cryptographic Protocol Implementation Method Based on OpenSSL
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
One of the most widely-used open source project; OpenSSL is a cryptography library that is used to secure most web sites, servers and clients. One can secure the communication with the Secure Socket Layer (SSL) or its successor, Transport Layer Security (TLS) protocols by using the OpenSSL library. Since cryptography protocols will be updated and enhanced in order to keep the system protected, the library was written in such a way that simplifies the integration of new cryptographic methods, especially for the symmetric cryptography protocols. However, it gets a lot more complicated in adding an asymmetric cryptography protocol and no guide can be found for the integration of the asymmetric cryptography protocol. In this paper, we explained the architecture of the OpenSSL library and provide a simple tutorial to modify the OpenSSL library in order to accommodate custom protocols of both symmetric and asymmetric cryptography.
Abstract
One of the most widely-used open source project; OpenSSL is a cryptography library that is used to secure most web sites, servers and clients. One can secure the communication with the Secure Socket Layer (SSL) or its successor, Transport Layer Security (TLS) protocols by using the OpenSSL library. Since cryptography protocols will be updated and enhanced in order to keep the system protected, the library was written in such a way that simplifies the integration of new cryptographic methods, especially for the symmetric cryptography protocols. However, it gets a lot more complicated in adding an asymmetric cryptography protocol and no guide can be found for the integration of the asymmetric cryptography protocol. In this paper, we explained the architecture of the OpenSSL library and provide a simple tutorial to modify the OpenSSL library in order to accommodate custom protocols of both symmetric and asymmetric cryptography.
참고문헌 (11)
- Ivan Ristic, "OpenSSL Cookbook" (2015), Feisty Duck Limited
- Kenneth Ballard, "Secure programming with OpenSSL API" (2012), IBM developerWorks
- F. Armknecht, "An Efficient Implementation of Trusted Channels based on OpenSSL", Proceedings of the 3rd ACM workshop on Scalable trusted computing, pp.41~50 (2008)
- M. Carvalho, "Heartbleed 101", IEEE Security & Privacy, 12(4), pp.63~67 (2014)
- Z, Durumeric, "The Matter of Heartbleed", Proceedings of the 2014 Conference on Internet Measurement Conference, pp.475~488 (2014)
- "Why Do Software Assurance Tools Have Problems Finding Bugs Like Heartbleed?" (2014)[URL]
- "OpenBSD Foundation"[URL]
- Jon B., "OpenSSL code beyond repair, claims creator of "LibreSSL" fork", Ars Technica, ~ (2014)
- "Sloccount, 2008"[URL]
- S. Yilek, "When private keys are public : results from the 2008 Debian OpenSSL vulnerability", Proceedings of the 9th ACM SIGCOMM conference on Internet measurement, pp.15~27 (2009)
- P. Jurkiewicz, "Implementation of a New Cipher in OpenSSL Environment the Case of INDECT Block Cipher", International Journal of Computer and Communication Engineering, 5(1), pp.41~49 (2016)