1 krypt the next level of ruby cryptography

[emboss]

krypt - What is it?

• Why do we need this? What's so bad about OpenSSL?

The headaches of being bound to OpenSSL

• OS X Lion deprecates it, Fedora moves away from it, Windows never had it
• JRuby devs have to bend their knees in order to emulate it
• Second-class crypto citizens everywhere

The dark corners of OpenSSL

• Certificate validation
• Validation of certificates
• Checking whether a certificate is valid
• Others

Enter krypt

• Runs on all Rubies
• Equally fast
• Sometimes faster than native code
• Create custom ASN.1 data types on the fly
• May be powered by arbitrary native crypto libraries
• Fully documented
• Exhaustive specs & test vectors
• Idiomatic Ruby API

[nahi]

👍 Go Martin!

krypt is a project that won one of the first grant from Ruby Association in Japan (Matz is a board member.) http://www.ruby-assn.org/en/releases/20111025_grant.htm
You should be able to learn about cross rubies extension programming (CRuby, JRuby and Rubinius) in addition to present state of Ruby and security.

[marekjelen]

+1

[plentz]

+1

[tlossen]

+1

[yorickpeterse]

Sounds interesting, upvotes/karma/+1 for this talk :)

[emboss]

Thanks, @nahi, thanks to all for being curious about krypt :) Yes, if you guys are interested in those things, I guess I have some stories to share on the obstacles of writing C and Java extension code that will finally run consistently among all Rubies. What I personally found quite interesting and insightful was how to still be able to use use some aspects of metaprogramming even if there is no direct equivalent in C or in Java. I'd be happy to share the experience if anyone is interested!

[DouweM]

👍

[rkh]

👍

[dbussink]

+1