2009 Annual Computer Security Applications Conference Symmetric Cryptography in Javascript Honolulu, Hawaii December 07-December 11 ISBN: 978-0-7695-3919-5
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ACSAC.2009.42
We take a systematic approach to developing a symmetric cryptography library in Javascript. We study various strategies for optimizing the code for the Javascript interpreter, and observe that traditional crypto optimization techniques do not apply when implemented in Javascript. We propose a number of optimizations that reduce both running time and code size. Our optimized library is about four times faster and 12% smaller than the fastest and smallest existing symmetric Javascript encryption libraries. On Internet Explorer 8, our library is about 11 times faster than the fastest previously existing code. In addition, we show that certain symmetric systems that are faster than AES when implemented in native x86 code, are in fact much slower than AES when implemented in Javascript. As a result, the choice of ciphers for a Javascript crypto library may be substantially different from the choice of ciphers when implementing crypto natively. Finally, we study the problem of generating strong randomness in Javascript and give extensive measurements validating our techniques.
Index Terms:
Javascript, cryptography, optimization
Citation:
Emily Stark, Michael Hamburg, Dan Boneh, "Symmetric Cryptography in Javascript," acsac, pp.373-381, 2009 Annual Computer Security Applications Conference, 2009 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||