• Arvind Kumar Pandey

While there are many established cryptographic frameworks that have been used to create sophisticated systems, developers often use them improperly, resulting in security problems. This is due to a number of issues, including the expectation that framework users understand security attacks and defense, as well as the subtle impact of various low-level parameters.) The need to take into account information from outside the system to ensure security (e.g., TLS certificate revocations). The need to disable security checks frequently during development and testing, as some security checks are disabled by default. We offer design principles for cryptography APIs that are semantically relevant to developers and can be reliably implemented on top of current frameworks. We also suggest the Regulator design pattern for integrating security-critical external information, as well as management hooks for isolating security workarounds required during development and testing. Our API is a starting step toward finding the appropriate balance between limiting developers' security choices while still allowing them the freedom required for sophisticated cryptographic applications.

API, Cryptography, Encryption, Framework, Security.

"Toward Semantic Cryptography APIs", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.5, Issue 10, page no.274-278, October-2018, Available :http://www.jetir.org/papers/JETIRFR06053.pdf

"Toward Semantic Cryptography APIs", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.5, Issue 10, page no. pp274-278, October-2018, Available at : http://www.jetir.org/papers/JETIRFR06053.pdf