Cryptographic modules

Typical use case cases for cryptographic modules are not only data encryption/decryption, but also SSL/TLS secure communication, key exchange, X509 certificate handling, one-way hashing for message integrity, and random number generation. The recommended encryption modules that the development team may need are shown here:

Encryption module	Adoption scenario
OpenSSL	Full-featured and most widely used cryptography and SSL/TLS toolkit
Bouncy Castle Crypto APIs	Lightweight cryptography Java API
mbed TLS	OpenSSL alternative Cryptographic and SSL/TLS in embedded products Cryptography C API
SSLyze	Verify the secure TLS configuration of the web server

 

 

In addition, an operation team may care more about the configuration of encryption on servers such as web servers, SSH, Mail, VPNs, database, proxy, and Kerberos.

Note

Refer to Applied Crypto Hardening: https://betterCrypto.org/static/applied-crypto-hardening.pdf.