论文标题
$ crypto_ {lib} $：比较和选择加密图书馆（EICC 2022出版物的长版）
$crypto_{lib}$: Comparing and selecting cryptography libraries (long version of EICC 2022 publication)
论文作者
论文摘要
从众多候选人中选择图书馆可能是一项费力且资源密集的任务。我们提出$ crypto_ {lib} $索引，这是决策者为给定上下文选择最佳拟合加密库的工具。为了定义我们的索引，根据文献综述和对决策者的访谈，从发现中综合了15个图书馆属性。随后通过在线调查对这些属性进行了验证和加权。为了为给定库创建索引值，使用与相应属性相关的给定评估标准评估单个属性。作为概念证明并给出了实用的用法示例，详细显示了图书馆弹力城堡和Tink的$ Crypto_ {lib} $值的推导。总体而言，通过定制$ Crypto_ {lib} $属性的权重，可以使决策者系统地选择加密库库以指导性，可重复且可靠的方式最适合其软件项目。
Selecting a library out of numerous candidates can be a laborious and resource-intensive task. We present the $crypto_{lib}$ index, a tool for decision-makers to choose the best fitting cryptography library for a given context. To define our index, 15 library attributes were synthesized from findings based on a literature review and interviews with decision-makers. These attributes were afterwards validated and weighted via an online survey. In order to create the index value for a given library, the individual attributes are assessed using given evaluation criteria associated with the respective attribute. As a proof of concept and to give a practical usage example, the derivation of the $crypto_{lib}$ values for the libraries Bouncy Castle and Tink are shown in detail. Overall, by tailoring the weighting of the $crypto_{lib}$ attributes to their current use case, decision-makers are enabled to systematically select a cryptography library fitting best to their software project at hand in a guided, repeatable and reliable way.
