Difference between revisions of "Web cryptography"
From Simson Garfinkel
Jump to navigationJump to search
m |
m |
||
| Line 5: | Line 5: | ||
* [http://caniuse.com/#feat=cryptography Can I use Web Cryptography], caniuse.com | * [http://caniuse.com/#feat=cryptography Can I use Web Cryptography], caniuse.com | ||
==Standards== | |||
Official: | |||
* [http://www.iana.org/assignments/jose/jose.xhtml JSON Object Signing and Encryption] (IANA) | |||
* [https://tools.ietf.org/html/rfc5958 RFC 5958 - Asymmetric Key Packages] | |||
* [https://tools.ietf.org/html/rfc5208 RFC 5208 - Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2] (Obsoleted by RFC 5958) | |||
* [https://tools.ietf.org/html/rfc7515 RFC 7515 JSON Web Signature (JWS)] | |||
* [https://tools.ietf.org/html/rfc7517 RFC 7517 JSON Web Key (JWK)] | |||
* [https://tools.ietf.org/html/rfc7518 RFC 7518 JSON Web Algorithms (JWA)] | |||
Web Cryptography API: | |||
** [https://w3c.github.io/webcrypto/Overview.html#rsassa-pkcs1-description W3C Editor's Draft 24 October 2016] | |||
** [https://www.w3.org/2012/webcrypto/WebCryptoAPI-20142503/Overview.htm W3C Last Call Working Draft 25 March 2014] | |||
==API Documentation== | |||
** [https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey SubtleCrypto.importKey()] (Mozilla Developer Network) | |||
==Compliance and availability== | |||
* [https://diafygi.github.io/webcrypto-examples/ Web Cryptography API Live Table] (What your browser supports) | |||
==Web Cryptography Demos== | ==Web Cryptography Demos== | ||
* [http://qnimate.com/post-series/web-cryptography-api-tutorial/ | |||
* [https://developer.mozilla.org/en-US/docs/Web/API/Window/crypto Window.crypto], Mozilla Developer Network, Jan 18, 2017 | * [https://developer.mozilla.org/en-US/docs/Web/API/Window/crypto Window.crypto], Mozilla Developer Network, Jan 18, 2017 | ||
* [https://github.com/diafygi/webcrypto-examples Web Cryptography API Examples], diayfgi@github, Oct 18, 2015 | * [https://github.com/diafygi/webcrypto-examples Web Cryptography API Examples], diayfgi@github, Oct 18, 2015 | ||
Revision as of 08:56, 16 February 2017
References for Web Cryptography:
- Web Cryptography API, W3C Proposed Recommendation, December 15, 2016
- Web Crypto API, Mozilla Developer Network, July 19, 2016
- Web Cryptography API, Microsoft Developer Network (IE 11 implementation).
- Can I use Web Cryptography, caniuse.com
Standards
Official:
- JSON Object Signing and Encryption (IANA)
- RFC 5958 - Asymmetric Key Packages
- RFC 5208 - Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2 (Obsoleted by RFC 5958)
- RFC 7515 JSON Web Signature (JWS)
- RFC 7517 JSON Web Key (JWK)
- RFC 7518 JSON Web Algorithms (JWA)
Web Cryptography API:
API Documentation
- SubtleCrypto.importKey() (Mozilla Developer Network)
Compliance and availability
- Web Cryptography API Live Table (What your browser supports)
Web Cryptography Demos
- [http://qnimate.com/post-series/web-cryptography-api-tutorial/
- Window.crypto, Mozilla Developer Network, Jan 18, 2017
- Web Cryptography API Examples, diayfgi@github, Oct 18, 2015
- Crypto Samples, nick.bleeken.eu
- RSA and ECC in JavaScript, stanford University
- JavaScript ECDH Key Exchange demo, Stanford University
IE11 Only
- Web Crypto Samples, nvdbleek@github, Nov 12, 2013
Tutorials
- Web Cryptography API Tutorial, Narayan Prusty, 2016, QNimate,
Arguments against web cryptography
- What's wrong with in-browser cryptography, Tony Arcieri, December 30, 2013.
- Javascript Cryptography Considered Harmful, Thomas Ptacek, 29 August 2011
Support
- WebCrypto, The Chronium Projects
- WebCrypto API enabled by default starting in Chrome 37
- Internet Explorer: Limited support in IE11
Server side
RSA in python
- https://pypi.python.org/pypi/rsa (PKCS #1)
- https://gist.github.com/JonCooperWorks/5314103 (bare bones)
- http://stackoverflow.com/questions/30056762/rsa-encryption-and-decryption-in-python
JSON Web Key in Python
- http://python-jose.readthedocs.io/en/latest/jwk/
- http://letsencrypt.readthedocs.io/projects/acme/en/latest/api/jose/jwk.html
- https://github.com/mpdavis/python-jose
- https://pypi.python.org/pypi/python-jose/0.6.1 JavaScript Object Signing and Encryption (JOSE) technologies
