Security layered models

[Christopher Petrilli]

Gang,

This is what Peter put in Cryptlib, and I think it's a great way to
think about "layering" the system. To think about it in the terms of
our discussion today, we're taking about implementing the "Encryption
services interface" and an "Adaption Layer", with OpenSSL implementing
a lot of the rest. Eventually, though, we need to work our way up the
stack. I'd like to also start thinking about the use cases that a
developer might be trying to deal with and how 1) it might work today;
2) how it should be dealt with.

Chris
--
| Chris Petrilli
| petr...@amber.org

[Mike]

Just a suggestion: it might make sense to model the higher level API
after CNG (http://msdn.microsoft.com/en-us/library/aa376214%28VS.
85%29.aspx). It was designed with extensibility in mind. Of course, it
has to be done in the OO style.

Mike

> | petri...@amber.org
>
>  security_layers.png
> 72KViewDownload