Difference between revisions of "Web cryptography"

From Simson Garfinkel
Jump to navigationJump to search
 
(5 intermediate revisions by the same user not shown)
Line 5: Line 5:
* [http://caniuse.com/#feat=cryptography Can I use Web Cryptography], caniuse.com
* [http://caniuse.com/#feat=cryptography Can I use Web Cryptography], caniuse.com


==Standards==
Official:
* [http://www.iana.org/assignments/jose/jose.xhtml JSON Object Signing and Encryption] (IANA)
* [https://tools.ietf.org/html/rfc5958 RFC 5958 - Asymmetric Key Packages]
* [https://tools.ietf.org/html/rfc5208 RFC 5208 - Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2] (Obsoleted by RFC 5958)
* [https://tools.ietf.org/html/rfc7515 RFC 7515 JSON Web Signature (JWS)]
* [https://tools.ietf.org/html/rfc7517 RFC 7517 JSON Web Key (JWK)]
* [https://tools.ietf.org/html/rfc7518 RFC 7518 JSON Web Algorithms (JWA)]
Web Cryptography API:
* [https://w3c.github.io/webcrypto/Overview.html#rsassa-pkcs1-description W3C Editor's Draft 24 October 2016]
* [https://www.w3.org/2012/webcrypto/WebCryptoAPI-20142503/Overview.htm W3C Last Call Working Draft 25 March 2014]
==API Documentation==
* [https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey SubtleCrypto.importKey()] (Mozilla Developer Network)
==Compliance and availability==
* http://caniuse.com/#feat=cryptography
* [https://diafygi.github.io/webcrypto-examples/ Web Cryptography API Live Table] (What your browser supports)


==Web Cryptography Demos==
==Web Cryptography Demos==
* [http://qnimate.com/post-series/web-cryptography-api-tutorial/ Web Cryptography API Tutorial]
* [https://developer.mozilla.org/en-US/docs/Web/API/Window/crypto Window.crypto], Mozilla Developer Network, Jan 18, 2017
* [https://developer.mozilla.org/en-US/docs/Web/API/Window/crypto Window.crypto], Mozilla Developer Network, Jan 18, 2017
* [https://github.com/diafygi/webcrypto-examples Web Cryptography API Examples], diayfgi@github, Oct 18, 2015
* [https://github.com/diafygi/webcrypto-examples Web Cryptography API Examples], diayfgi@github, Oct 18, 2015
Line 20: Line 40:
==Tutorials==
==Tutorials==
* [http://qnimate.com/post-series/web-cryptography-api-tutorial/ Web Cryptography API Tutorial], Narayan Prusty, 2016, QNimate,
* [http://qnimate.com/post-series/web-cryptography-api-tutorial/ Web Cryptography API Tutorial], Narayan Prusty, 2016, QNimate,


== Arguments against web cryptography ==
== Arguments against web cryptography ==
* [https://tonyarcieri.com/whats-wrong-with-webcrypto What's wrong with in-browser cryptography], Tony Arcieri, December 30, 2013.
* [https://tonyarcieri.com/whats-wrong-with-webcrypto What's wrong with in-browser cryptography], Tony Arcieri, December 30, 2013.
* [https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/august/javascript-cryptography-considered-harmful/ Javascript Cryptography Considered Harmful], Thomas Ptacek, 29 August 2011
* [https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/august/javascript-cryptography-considered-harmful/ Javascript Cryptography Considered Harmful], Thomas Ptacek, 29 August 2011


==Support==
==Support==
Line 31: Line 49:
* WebCrypto API enabled by default starting in Chrome 37
* WebCrypto API enabled by default starting in Chrome 37
* Internet Explorer: [https://msdn.microsoft.com/en-us/library/dn265046(v=vs.85).aspx  Limited support in IE11]
* Internet Explorer: [https://msdn.microsoft.com/en-us/library/dn265046(v=vs.85).aspx  Limited support in IE11]
=Server side=
==RSA in python==
* https://pypi.python.org/pypi/rsa (PKCS #1)
* https://gist.github.com/JonCooperWorks/5314103 (bare bones)
* http://stackoverflow.com/questions/30056762/rsa-encryption-and-decryption-in-python
==JSON Web Key in Python==
* http://python-jose.readthedocs.io/en/latest/jwk/
* http://letsencrypt.readthedocs.io/projects/acme/en/latest/api/jose/jwk.html
* https://github.com/mpdavis/python-jose
* https://pypi.python.org/pypi/python-jose/0.6.1  JavaScript Object Signing and Encryption (JOSE) technologies

Latest revision as of 09:07, 3 October 2017

References for Web Cryptography:

Standards

Official:

Web Cryptography API:

API Documentation

Compliance and availability

Web Cryptography Demos

IE11 Only

Tutorials

Arguments against web cryptography

Support

Server side

RSA in python

JSON Web Key in Python