![]() This is a simple, first-pass that gives us an initial idea as to whether or not the source code might contain encryption. So as a start, we can scan the source code searching for these keywords. ![]() For example, a block of open source code that makes use of the DES algorithm is very likely to contain strings such as "DES_" or "cipher". More often than not, source code that contains an encryption algorithm has words that are very related to that algorithm. The output could then be verified by a human expert. We are developing this project to be an automated and efficient code parser that can determine, with some degree of confidence, that a piece of code contains restricted encryption algorithms. Thousands of packages are bundled as part of the Wind River operating system. Detecting cryptography in the source code of open-source packages or libraries turns out to be a common problem for many of the software companies that include these packages in their products.Īt Wind River, we face a similar challenge.
0 Comments
Leave a Reply. |