Towards a Methodology for the Development of Secure Cryptographic Software
Historically, software security has approached the development of cryptographic software merely as a feature to be added. This stance did not have a positive influence on the design of advanced security functionalities into modern software. Thus, this work proposes a methodology for development of secure cryptographic software, providing a structured way to approach cryptography into secure development methods. Our methodology captures the (otherwise casual) practices of secure software development employed by modern software factories when building security critical software with cryptographic technologies. In time, we compare our work with other methods, provide actual examples, as well as analyze architectural aspects and specialized tool support for secure coding and verification of cryptographic software. We do believe this work contributes to bridge the gap between modern cryptographic software and today's development methods for secure software.
2016 International Conference on Software Security and Assurance (ICSSA)