Full Text Available

Note: Clicking the button above will open the full text document at the original institutional repository in a new window.

A framework for cryptography algorithms on mobile devices

Dissertation (MSc (Computer Science))--University of Pretoria, 2007.

Saved in:
Bibliographic Details
Other Authors: Bishop, Judith
Format: Thesis
Published: University of Pretoria 2013
Subjects:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1867613686930079744
access_status_str Open Access
author2 Bishop, Judith
author_browse Bishop, Judith
author_facet Bishop, Judith
collection Thesis
dc_rights_str_mv © University of Pretor
description Dissertation (MSc (Computer Science))--University of Pretoria, 2007.
format Thesis
id oai:repository.up.ac.za:2263/28849
institution University of Pretoria (South Africa)
last_indexed 2026-06-10T12:40:05.686Z
license_str Other — see source repository
provenance_str_mv Harvested via OAI-PMH from UPSpace — University of Pretoria Institutional Repository
publishDate 2013
publishDateRange 2013
publishDateSort 2013
publisher University of Pretoria
publisherStr University of Pretoria
record_format dspace
source_str UPSpace — University of Pretoria Institutional Repository
spelling oai:repository.up.ac.za:2263/28849 A framework for cryptography algorithms on mobile devices Bishop, Judith jlo@cs.up.ac.za Lo, Johnny Li-Chang Cryptography Software components Frameworks Small message service (SMS) Entropy Standards Protocol Software application. Server Client Mobile devices Protocol Cryptographic packages UCTD Dissertation (MSc (Computer Science))--University of Pretoria, 2007. Mobile communication devices have become a popular tool for gathering and disseminating information and data. With the evidence of the growth of wireless technology and a need for more flexible, customizable and better-optimised security schemes, it is evident that connection-based security such as HTTPS may not be sufficient. In order to provide sufficient security at the application layer, developers need access to a cryptography package. Such packages are available as third party mobile cryptographic toolkits or are supported natively on the mobile device. Typically mobile cryptographic packages have reduced their number of API methods to keep the package lightweight in size, but consequently making it quite complex to use. As a result developers could easily misuse a method which can weaken the entire security of a system without knowing it. Aside from the complexities in the API, mobile cryptography packages often do not apply sound cryptography within the implementation of the algorithms thus causing vulnerabilities in its utilization and initialization. Although FIPS 140-2 and CAPI suggest guidelines on how cryptographic algorithms should be implemented, they do not define the guidelines for implementing and using cryptography in a mobile environment. In our study, we do not define new cryptographic algorithms, instead, we investigate how sound cryptography can be applied practically in a mobile application environment and developed a framework called Linca (which stands for Logical Integration of Cryptographic Architectures) that can be used as a mobile cryptographic package to demonstrate our findings. The benefit that Linca has is that it hides the complexity of making incorrect cryptographic algorithm decisions, cryptographic algorithm initialization and utilization and key management, while maintaining a small size. Linca also applies sound cryptographic fundamentals internally within the framework, which radiates these benefits outwards at the API. Because Linca is a framework, certain architecture and design patterns are applied internally so that the cryptographic mechanisms and algorithms can be easily maintained. Linca showed better results when evaluated against two mobile cryptography API packages namely Bouncy Castle API and Secure and Trust Service API in terms of security and design. We demonstrate the applicability of Linca on using two realistic examples that cover securing network channels and on-device data. Computer Science MSc unrestricted 2013-09-07T14:22:21Z 2007-11-08 2013-09-07T14:22:21Z 2007-04-25 2007-11-08 2007-10-19 Dissertation Lo, JL 2007, A framework for cryptography algorithms on mobile devices, MSc Dissertation, University of Pretoria, Pretoria, viewed yymmdd <http://hdl.handle.net/2263/28849> Pretoria http://hdl.handle.net/2263/28849 http://upetd.up.ac.za/thesis/available/etd-10192007-155921/ © University of Pretor application/pdf University of Pretoria
spellingShingle Cryptography
Software components
Frameworks
Small message service (SMS)
Entropy
Standards
Protocol
Software application.
Server
Client
Mobile devices
Protocol
Cryptographic packages
UCTD
A framework for cryptography algorithms on mobile devices
title A framework for cryptography algorithms on mobile devices
title_full A framework for cryptography algorithms on mobile devices
title_fullStr A framework for cryptography algorithms on mobile devices
title_full_unstemmed A framework for cryptography algorithms on mobile devices
title_short A framework for cryptography algorithms on mobile devices
title_sort framework for cryptography algorithms on mobile devices
topic Cryptography
Software components
Frameworks
Small message service (SMS)
Entropy
Standards
Protocol
Software application.
Server
Client
Mobile devices
Protocol
Cryptographic packages
UCTD
url http://hdl.handle.net/2263/28849
http://upetd.up.ac.za/thesis/available/etd-10192007-155921/