Keyczar

[Nytro]

Keyczar

Important note: KeyCzar has some known security issues which may influence your decision to use it. See Known Security Issues.

Introduction

Keyczar is an open source cryptographic toolkit designed to make it easier and safer for developers to use cryptography in their applications. Keyczar supports authentication and encryption with both symmetric and asymmetric keys. Some features of Keyczar include:

• A simple API
• Key rotation and versioning
• Safe default algorithms, modes, and key lengths
• Automated generation of initialization vectors and ciphertext signatures
• Java, Python, and C++ implementations
• International support in Java

 

Keyczar was originally developed by members of the Google Security Team and is released under an Apache 2.0 license.

Quick Links

• Known Security Issues
• Discussion Group
• Design Document (PDF)

Why Keyczar?

Cryptography is easy to get wrong. Developers can choose improper cipher modes, use obsolete algorithms, compose primitives in an unsafe manner, or fail to anticipate the need for key rotation. Keyczar abstracts some of these details by choosing safe defaults, automatically tagging outputs with key version information, and providing a simple programming interface.

Keyczar is designed to be open, extensible, and cross-platform compatible. It is not intended to replace existing cryptographic libraries like OpenSSL, PyCrypto, or the Java JCE, and in fact is built on these libraries.

 

Sursa: https://github.com/google/keyczar