Comparison between two source code encryption libraries: OpenSSL and cryptlib

[OpenSSL resources]

Http://www.openssl.org

Chinese website recommendation: http://gdwzh.126.com

Current: openssl-0.9.7

[Cryptlib]

Download Site: http://www.eskimo.com /~ Weidai/cryptlib.html

Current version: Version 5.0

CurrentlyOpenSource code OpenSSL and cryptlib are both popular in the encrypted library. This article will compare the two libraries based on your own understanding, hoping to be useful to everyone. The construction ideas and objectives of these two libraries are not the same. OpenSSL is mainly for the implementation of SSL/TLS protocol Function And AlgorithmThe library is only a necessary and complete part. Crypylib implements encryption algorithms and related encoding standards.

[Composition and features of OpenSSL]

OpenSSL is an excellent SSL/TLS open source software package, which includes the SSL library, encryption algorithm library, and applications.ProgramAnd provides test programs and some application examples to implement the SSL/TLS Protocol and related PKI standards. OpenSSL is used because it has been developed earlier.C LanguageAs a programming language, however, many object-oriented ideas can be found in OpenSSL. For example, bio encapsulation is a typical example. It may be a bit difficult for technical personnel who have just started to contact OpenSSL because the structure of OpenSSL is very large. Even if they have to read the incomplete documentation, the workload is very huge. We recommend that you start using some of the applications provided by OpenSSL, except for some basic cryptography and PKI concepts. In fact, OpenSSL applications have been well developed, and many CAs are built on these foundations.

For many people, OpenSSL applications are sufficient to complete the functions they need. OpenSSL applications mainly provide the following functions:

1. Generation andFormat ConversionFunction

2. Use various encryption algorithmsData EncryptionFunctions

3. Certificate requests, certificate generation and issuance, and certificate conversion functions related to other standards, implementing a ca Function

4. Information Digest algorithm and its related encoding implementation

5. Simulate the client andServerCan be used to test the SSL server and the ssl client program.

[Composition and features of cryptlib]

Cryptlib implements variousPublic KeyAlgorithms, symmetric encryption algorithms,Digital SignatureAlgorithms, information digest algorithms, and other related algorithms. It is written in C ++. Because it is an object-oriented language, it is easier for beginners to understand its structure. The Library does not provide applications, but provides applications as library functions. BecauseC ++Compared with OpenSSL, the algorithm separation of OSS is easier. For technical personnel who do not need to involve the SSL protocol, using the library function application is a good choice.

[Application Status Quo and suggestions]

Currently, many CAs and other PKI commercial programs are developed based on OpenSSL. The development based on OpenSSL features a short period of time and powerful functions. Cryptlib is only limited to encryption algorithms, so it is not widely used in OpenSSL. However, this is a better choice for encryption algorithms.

We recommend that you use OpenSSL if your application involves PKI protocols such as SSL. If you only apply some encryption algorithms, we recommend that you use cryptlib.