Crypto-API-Rules icon indicating copy to clipboard operation
Crypto-API-Rules copied to clipboard

Github Service implementing a regulator pattern to update rules

Open kruegers opened this issue 5 years ago • 0 comments

The authors of this paper argue for the use of a Regulator pattern for cryptographic libraries. With a regular pattern, such a library could automatically update the algorithms it uses to avoid using deprecated ones. Now, CrySL is not a library, but as algorithms become deprecated, CrySL rules become outdated. A web or github service regularly checking for the latest recommendations by authorities like NIST or the BSI might make maintaining rules easier. Implement such a service that collects recommendations from multiple sources. Equipped with those recommendations, the service should then compare which algorithms CrySL rules currently allow and open a PR on this repository with appropriate modifications.

kruegers avatar Dec 07 '19 21:12 kruegers