Difference between revisions of "Web cryptography"
From Simson Garfinkel
Jump to navigationJump to search
m (→Standards) |
|||
| Line 15: | Line 15: | ||
Web Cryptography API: | Web Cryptography API: | ||
* [https://w3c.github.io/webcrypto/Overview.html#rsassa-pkcs1-description W3C Editor's Draft 24 October 2016] | |||
* [https://www.w3.org/2012/webcrypto/WebCryptoAPI-20142503/Overview.htm W3C Last Call Working Draft 25 March 2014] | |||
==API Documentation== | ==API Documentation== | ||
Revision as of 08:57, 16 February 2017
References for Web Cryptography:
- Web Cryptography API, W3C Proposed Recommendation, December 15, 2016
- Web Crypto API, Mozilla Developer Network, July 19, 2016
- Web Cryptography API, Microsoft Developer Network (IE 11 implementation).
- Can I use Web Cryptography, caniuse.com
Standards
Official:
- JSON Object Signing and Encryption (IANA)
- RFC 5958 - Asymmetric Key Packages
- RFC 5208 - Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2 (Obsoleted by RFC 5958)
- RFC 7515 JSON Web Signature (JWS)
- RFC 7517 JSON Web Key (JWK)
- RFC 7518 JSON Web Algorithms (JWA)
Web Cryptography API:
API Documentation
- SubtleCrypto.importKey() (Mozilla Developer Network)
Compliance and availability
- Web Cryptography API Live Table (What your browser supports)
Web Cryptography Demos
- [http://qnimate.com/post-series/web-cryptography-api-tutorial/
- Window.crypto, Mozilla Developer Network, Jan 18, 2017
- Web Cryptography API Examples, diayfgi@github, Oct 18, 2015
- Crypto Samples, nick.bleeken.eu
- RSA and ECC in JavaScript, stanford University
- JavaScript ECDH Key Exchange demo, Stanford University
IE11 Only
- Web Crypto Samples, nvdbleek@github, Nov 12, 2013
Tutorials
- Web Cryptography API Tutorial, Narayan Prusty, 2016, QNimate,
Arguments against web cryptography
- What's wrong with in-browser cryptography, Tony Arcieri, December 30, 2013.
- Javascript Cryptography Considered Harmful, Thomas Ptacek, 29 August 2011
Support
- WebCrypto, The Chronium Projects
- WebCrypto API enabled by default starting in Chrome 37
- Internet Explorer: Limited support in IE11
Server side
RSA in python
- https://pypi.python.org/pypi/rsa (PKCS #1)
- https://gist.github.com/JonCooperWorks/5314103 (bare bones)
- http://stackoverflow.com/questions/30056762/rsa-encryption-and-decryption-in-python
JSON Web Key in Python
- http://python-jose.readthedocs.io/en/latest/jwk/
- http://letsencrypt.readthedocs.io/projects/acme/en/latest/api/jose/jwk.html
- https://github.com/mpdavis/python-jose
- https://pypi.python.org/pypi/python-jose/0.6.1 JavaScript Object Signing and Encryption (JOSE) technologies
