<head>

<meta charset="utf-8">

<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">

<title>Botan - Your C++ Crypto Library of Choice</title>

<link rel="stylesheet" href="css/reveal.css">

<link rel="stylesheet" href="css/theme/black.css">

<!-- Theme used for syntax highlighting of code -->

<link rel="stylesheet" href="lib/css/zenburn.css">

<!-- Printing and PDF exports -->

<script>

var link = document.createElement( 'link' );

link.rel = 'stylesheet';

link.type = 'text/css';

link.href = window.location.search.match( /print-pdf/gi ) ? 'css/print/pdf.css' : 'css/print/paper.css';

document.getElementsByTagName( 'head' )[0].appendChild( link );

</script>

</head>

<body>

<div class="reveal">

<div class="slides">

<section>

<h1>Botan</h1>

<h3>Your C++ Crypto Library Of Choice</h3>

<p>

<small>Slides by <a href="http://twitter.com/securitykernel">@securitykernel</a></small>

</p>

</section>

<section>

<h2>Japanese for "peony"</h2>

<img src="img/peony.jpg" width="70%" height="70%" alt="Source: Wikipedia"/>

</section>

<section>

<ul>

<li>C++11</li>

<li>First release 2001</li>

<li>License: Simplified BSD</li>

<li>Handbook, Doxygen API doc</li>

<li>Self-contained, no dependencies</li>

<li>Development on GitHub</li>

<li>1 Maintainer, several contributors (including me :))</li>

</ul>

</section>

<section>

<h2>2 Branches</h2>

<ul>

<li>Stable (1.10)</li>

<ul>

<li>C++98</li>

</ul>

<li>Development (1.11)</li>

<ul>

<li>API changes possible</li>

<li>C++11 compiler required</li>

<li>Monthly releases</li>

<li>Will eventually become 2.0</li>

</ul>

</ul>

</section>

<section>

<section>

<h2>Features</h2>

</section>

<section>

<h2>Block Ciphers</h2>

<p>e.g., AES-GCM, ChaCha20Poly1305</p>

</section>

<section>

<h2>TLS/PKI</h2>

<ul>

<li>TLS/DTLS 1.0-1.2</li>

<li>X.509v3 certs and CRLs</li>

<li>PKIX cert path validation</li>

<li>OCSP</li>

<li>PKCS#10 CSRs</li>

</ul>

</section>

<section>

<h2>Public Key Crypto</h2>

<ul>

<li>e.g., RSA and ECC (NIST, Brainpool, Curve25519)</li>

<li>QC-resistant McEliece KEM</li>

<li>QC-resistant Merkle signatures (coming soon)</li>

</ul>

</section>

<section>

<h2>Other</h2>

<ul>

<li>Hash functions: e.g., SHA-1, SHA-2, SHA-3</li>

<li>KDFs: e.g., PBKDF2</li>

<li>Password hashing: e.g., bcrypt, passhash9 (PBKDF-based)</li>

<li>TPM 1.2, PKCS#11 support</li>

</ul>

</section>

</section>

<section>

<h2>Platforms</h2>

<ul>

<p>AIX, Android, Cygwin, Darwin (iOS/macOS),

<p>BSD, Haiku, HP-UX, Hurd, IRIX, Linux, Mingw,

<p>QNX, Solaris, Windows</p>

</ul>

</section>

<section>

<h2>Bindings</h2>

<ul>

<li>C89</li>

<li>Python</li>

<li>OCaml</li>

<li>Node.js</li>

</ul>

</section>

<section>

<h2>Design</h2>

<ul>

<li>Divided into modules, e.g., AES, ECDSA, TLS</li>

<li>Well-defined interfaces, e.g., <i>BlockCipher</i>, <i>HashFunction</i></li>

<li>3 Components:</li>

<ul>

<li>Library</li>

<li>CLI</li>

<li>Testsuite (82% coverage)</li>

</ul>

<li>Engine-like concept ("providers"), e.g., OpenSSL</li>

</ul>

</section>

<section>

<section>

<h2>Providers</h2>

<ul>

<li>Idea: Provide alternative implementations of certain algorithms</li>

<li>Choose implementation variant at runtime</li>

<li>Available providers choosen during configure, compiled in</li>

<li>"base" provider (default): Botan's software implementation</li>

<li>Priority of providers compile-time configurable</li>

</ul>

</section>

<section>

<h2>Available Providers</h2>

<ul>

<li>OpenSSL: block ciphers, ECDSA, hash functions, RC4, RSA</li>

<li>PKCS11: ECDH, ECDSA, RNG, RSA, X.509</li>

<li>TPM (WIP)</li>

</ul>

<pre><code class="cpp">

// sign and verify using openssl provider

Botan::AutoSeeded_RNG rng;

Botan::RSA_PrivateKey key(rng, 2048);

Botan::secure_vector&lt;uint8_t&gt; in { 0x01, 0x02, 0x03 };

Botan::PK_Signer signer(key, "EMSA4(SHA-256)",

Botan::IEEE_1363, "openssl");

std::vector&lt;uint8_t&gt; sig = signer.sign_message(in, rng);

Botan::PK_Verifier verifier(key, "EMSA4(SHA-256)",

Botan::IEEE_1363, "openssl");

bool ok = verifier.verify_message(in, sig);

</code></pre>

</section>

</section>

<section>

<h2>Random Number Generation</h2>

<ul>

<li>HMAC_RNG (RFC 5869 variant), HMAC_DRBG (NIST), System_RNG</li>

<li>AutoSeeded_RNG (HMAC_DRBG, automatically seeded)</li>

<li>Entropy sources:</li>

<ul>

<li>/dev/random / CryptGenRandom</li>

<li>Timestamp (highres)</li>

<li>rdrand</li>

<li>rdseed</li>

<li>Can feed arbitrary additional entropy</li>

</ul>

<li>Pass RandomNumberGenerator& whenever random numbers needed</li>

</section>

<section>

<h2>Building</h2>

<pre><code class="bash">

./configure.py --help

./configure.py [--enable-modules=] [--disable-modules=]

[--with-openssl] ...

make

./botan-test

# Tests all ok

./botan

</code></pre>

</section>

<section>

<section>

<h2>Examples</h2>

</section>

<section>

<h2>ECDSA sign</h2>

<pre><code class="cpp">

Botan::AutoSeeded_RNG rng;

Botan::ECDSA_PrivateKey key(rng, Botan::EC_Group("brainpool512r1"));

Botan::secure_vector&lt;Botan::byte&gt; in { 0x01, 0x02, 0x03 };

Botan::PK_Signer signer(key, "EMSA1(SHA-256)", Botan::IEEE_1363);

std::vector&lt;Botan::byte&gt; sig = signer.sign_message(in, rng);

Botan::PK_Verifier verifier(key, "EMSA1(SHA-256)", Botan::IEEE_1363);

bool ok = verifier.verify_message(in, sig);

</code></pre>

</section>

<section>

<h2>AES encrypt</h2>

<pre><code class="cpp">

std::unique_ptr&lt;Botan::AEAD_Mode&gt; enc(

Botan::get_aead("AES-256/GCM", Botan::ENCRYPTION));

Botan::AutoSeeded_RNG rng;

Botan::secure_vector&lt;uint8_t&gt; key = rng.random_vec(32);

Botan::secure_vector&lt;uint8_t&gt; nonce = rng.random_vec(32);

enc->set_key(key);

//enc->set_associated_data_vec(ad);

enc->start(nonce);

Botan::secure_vector&lt;uint8_t&gt; buf(32, 0xFE);

enc->finish(buf); // encrypts in-place

</code></pre>

</section>

<section>

<h2>SHA-256</h2>

<pre><code class="cpp">

std::unique_ptr&lt;Botan::HashFunction&gt; sha256(

Botan::HashFunction::create("SHA-256"));

sha256->update("123");

sha256->update("456");

Botan::secure_vector&lt;uint8_t&gt; digest = sha256->final();

</code></pre>

</section>

<section>

<h2>More Examples?</h2>

<ul>

<li>https://botan.randombit.net/manual/</li>

<li><i>src/tests/*</i></li>

</ul>

</section>

</section>

<section>

<h2>Botan vs. Crypto++</h2>

<table>

<tr>

<td>Practical interfaces</td>

<td>Academic interfaces</td>

</tr>

<tr>

<td>TLS</td>

<td>No TLS</td>

</tr>

<tr>

<td>X.509</td>

<td>No X.509</td>

</tr>

<tr>

<td>PKCS#11, TPM support</td>

<td>No HSM support</td>

</tr>

<tr>

<td>Provider concept</td>

<td>No such thing</td>

</tr>

<tr>

<td>Bindings</td>

<td>No bindings</td>

</tr>

</table>

</section>

<section>

<h2>Crypto++: AES encrypt</h2>

<pre><code class="cpp">

CryptoPP::GCM&lt;CryptoPP::AES&gt;::Encryption e;

e.SetKeyWithIV(key, sizeof(key), iv, sizeof(iv));

CryptoPP::AuthenticatedEncryptionFilter ef(e,

new CryptoPP::StringSink( cipher ), false, TAG_SIZE);

ef.ChannelPut("AAD", (const byte*)adata.data(), adata.size());

ef.ChannelMessageEnd("AAD");

ef.ChannelPut("", (const byte*)pdata.data(), pdata.size());

ef.ChannelMessageEnd("");

CryptoPP::StringSource(cipher, true,

new CryptoPP::HexEncoder(

new CryptoPP::StringSink(encoded), true, 16, " " ));

</code></pre>

</section>

<section>

<h2>Contributions welcome!</h2>

<ul>

<li>Review code</li>

<li>Use static analyzers</li>

<li>Fuzz (see https://github.com/randombit/botan-fuzzers)</li>

<li>mod_botan?</li>

<li>strongswan plugin?</li>

<li>More: doc/todo.rst</li>

</ul>

</section>

<section>

<h2>Slides and example code</h2>

<p><small><a href="https://github.com/cordney/botan-pottcpp">https://github.com/cordney/botan-pottcpp</a></small></p>

</section>

<section>

<h2>Thank you. Questions?</h2>

</section>

</div>

</div>

<script src="lib/js/head.min.js"></script>

<script src="js/reveal.js"></script>

<script>

// More info https://github.com/hakimel/reveal.js#configuration

Reveal.initialize({

history: true,

// More info https://github.com/hakimel/reveal.js#dependencies

dependencies: [

{ src: 'plugin/markdown/marked.js' },

{ src: 'plugin/markdown/markdown.js' },

{ src: 'plugin/notes/notes.js', async: true },

{ src: 'plugin/highlight/highlight.js', async: true, callback: function() { hljs.initHighlightingOnLoad(); } }

]

});

</script>

</body>