[Cryptech Tech] W3C workshop on Crypto, Secure Authentication, Hardware Tokens

[John Mattsson]

Hi,

As I wrote in an earlier email to some Cryptech people, I think this is
something that should be brought up at the W3C workshop.

Cheers,
John

------------------------------------------------------------------------

As you may or may not know, W3C is hosting a workshop on  WebCrypto Next
Steps, focusing quite much on hardware support, high value environments,
and issues around secure private key storage:

http://www.w3.org/2012/webcrypto/webcrypto-next-workshop/Overview.html

I plan to write some contributions to this workshop. One of the things
that should be brought up is how hardware support can make the WebCrypto
API (and other Web APIs) more secure, especially if the hardware is open
source, i.e. Cryptech.

Obvious browser APIs that could use Cryptech is:

* Random number and key generation
* Key storage, wrap, and unwrap
* Encrypt, HMAC, Sign using above mentioned keys
Password management, SSO

* Etc.

It is also a good place to market Cryptech. Do you agree? Maybe you have
already discussed this workshop, but I could not see any discussion on the
cryptech lists.


------------------------------------------------------------------------







On 24/07/14 07:52, "Wendy Seltzer" <wseltzer at w3.org> wrote:

>Hi Cryptech,
>
>At the Web layer, W3C is working on a WebCrypto API [1] for javascript
>crypto in the browser. We're now looking at next steps for its use with
>hardware modules and tokens for secure authentication on the Web,
>holding a workshop in early September (10-11 in Mountain View, CA):
>  http://www.w3.org/2012/webcrypto/webcrypto-next-workshop/
>
>We've extended the submission deadline through the end of July, so if
>you're interested in joining us in Mountain View, please send in a brief
>expression of interest. Let me know if you have any questions.
>
>Best,
>--Wendy
>
>[1] http://www.w3.org/TR/WebCryptoAPI/
>-- 
>Wendy Seltzer -- wseltzer at w3.org +1.617.715.4883 (office)
>Policy Counsel and Domain Lead, World Wide Web Consortium (W3C)
>http://wendy.seltzer.org/        +1.617.863.0613 (mobile)
>
>_______________________________________________
>Tech mailing list
>Tech at cryptech.is
>https://lists.cryptech.is/listinfo/tech