TL;DR: This article proposes a scheme to include trust management and attribute certificates for authorization in two widely used cryptographic APIs: Microsoft CryptoAPI and RSA labs PKCS#11.
Abstract: Increasing efforts are placed on security solutions for nomadic users. Solutions based on smart cards offer physical and logical portability, robustness, low cost, and high security. Nevertheless, such solutions concentrate only on offering the cryptographical capabilities of the smart card, together with key and user certificate storage. Advanced trust management and access control are not addressed. In this article, we propose a scheme to include trust management and attribute certificates for authorization in two widely used cryptographic APIs: Microsoft CryptoAPI and RSA labs PKCS#11.
TL;DR: Everything a VB Programmer needs to know about Cryptography is taught.
Abstract: Everything a VB Programmer Needs to Know about Cryptography An Overview of the CryptoAPI Calling the CryptoAPI from Visual Basic Advanced Visual Basic Tricks An Object Model for the CryptoAPI The Provider and the Container Objects The Key Objects Hashing and Signing with the WCCO Objects Encryption and the Messagetext Object Testing the Objects Key Management and Data Security Philosophy, Public Policy, the Law, and Cryptography Appendices Glossary Bibliography Wiley Open Source License Index.
TL;DR: Developing Secure Applications with Visual Basic first provides you with an understanding of encryption, and then guides you through adding security features to your own applications using the Microsoft CryptoAPI, and the new security features of Windows 2000.
Abstract: From the Publisher:
Using client-proven methods, and over 15 years of programming experience, expert author Davis Chapman empowers developers to create powerful, secure applications. Developing Secure Applications with Visual Basic first provides you with an understanding of encryption, and then guides you through adding security features to your own applications using the Microsoft CryptoAPI, and the new security features of Windows 2000. Developers who have been confused by the high-end, academic style of other encryption books and cryptography theory will delight with Chapman's understandable style and hands-on methods. This book covers security topics developers want and need to know including File Encryption, Encrypted Communications, Working with Certificates, Digital Signatures, SChannel Communications (SSL), Secure E-Mail, and much more.
TL;DR: The information security component framework is proposed, while SSL (Secure Sockets Layer) using the confidentiality and integrity component interfaces has been implemented to verify validity of the framework.
Abstract: Summary Various security APIs such as IETF GCS-API and GSS-API, RSA Cryptoki, Microsoft CryptoAPI, and Intel CDSA are being used in a variety of application areas requiring the information security function. However, these proprietary standards are not compatible, and the developer must use those APIs selectively depending on the application environment or the programming language. To resolve this problem, we propose the information security component framework, while SSL (Secure Sockets Layer) using the confidentiality and integrity component interfaces has been implemented to verify validity of the framework. The implemented SSL uses the lower-level SSL component when establishing the RMI (Remote Method Invocation) communication between components, as if the security algorithm had been implemented by adding one more layer on the TCP/IP.