Cryptography

Although cryptography is an essential component of modern computing, implementing cryptography correctly is a non-trivial undertaking, often resulting in developers making errors and introducing vulnerabilities into their cryptographic products. Our cryptographic research is concerned with creating a baseline understanding of the current practices and challenges of organizations that are developing products that use cryptography. This new understanding can help improve the assurance of cryptographic tools and the usability of cryptographic resources such as standards and libraries.

Current/recent research projects:

• Organizational cryptographic product development  – online survey and interview study that explored the practices, challenges, resources, and security mindsets of organizations developing cryptographic products

Past projects:

• Usable key management - identified usability issues in cryptographic key management interfaces and processes