Hurdles for Developers in Cryptography
Prior research has shown that cryptography is hard to use for developers. We aim to understand what cryptography issues developers face in practice. We clustered 91954 cryptography-related questions on the Stack Overflow website, and manually analyzed a significant sample (i.e., 383) of the question...
Gespeichert in:
Hauptverfasser: | , , , |
---|---|
Format: | Artikel |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | Prior research has shown that cryptography is hard to use for developers. We
aim to understand what cryptography issues developers face in practice. We
clustered 91954 cryptography-related questions on the Stack Overflow website,
and manually analyzed a significant sample (i.e., 383) of the questions to
comprehend the crypto challenges developers commonly face in this domain. We
found that either developers have a distinct lack of knowledge in understanding
the fundamental concepts, \eg OpenSSL, public-key cryptography or password
hashing, or the usability of crypto libraries undermined developer performance
to correctly realize a crypto scenario. This is alarming and indicates the need
for dedicated research to improve the design of crypto APIs. |
---|---|
DOI: | 10.48550/arxiv.2108.07141 |