Hands-On Security in DevOps

Cryptographic modules

Typical use case cases for cryptographic modules are not only data encryption/decryption, but also SSL/TLS secure communication, key exchange, X509 certificate handling, one-way hashing for message integrity, and random number generation. The recommended encryption modules that the development team may need are shown here:

Encryption module	Adoption scenario
OpenSSL	Full-featured and most widely used cryptography and SSL/TLS toolkit
Bouncy Castle Crypto APIs	Lightweight cryptography Java API
mbed TLS	OpenSSL alternative Cryptographic and SSL/TLS in embedded products Cryptography C API
SSLyze	Verify the secure TLS configuration of the web server

In addition, an operation team may ...