Time to Separate from StackOverflow and Match with ChatGPT for Encryption
Fuente:
arXiv
Salvato in:
| Autori principali: | , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2024
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866914830610333696 |
|---|---|
| author | Firouzi, Ehsan Ghafari, Mohammad |
| author_facet | Firouzi, Ehsan Ghafari, Mohammad |
| contents | Cryptography is known as a challenging topic for developers. We studied StackOverflow posts to identify the problems that developers encounter when using Java Cryptography Architecture (JCA) for symmetric encryption. We investigated security risks that are disseminated in these posts, and we examined whether ChatGPT helps avoid cryptography issues. We found that developers frequently struggle with key and IV generations, as well as padding. Security is a top concern among developers, but security issues are pervasive in code snippets. ChatGPT can effectively aid developers when they engage with it properly. Nevertheless, it does not substitute human expertise, and developers should remain alert. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2406_06164 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Time to Separate from StackOverflow and Match with ChatGPT for Encryption Firouzi, Ehsan Ghafari, Mohammad Cryptography and Security Cryptography is known as a challenging topic for developers. We studied StackOverflow posts to identify the problems that developers encounter when using Java Cryptography Architecture (JCA) for symmetric encryption. We investigated security risks that are disseminated in these posts, and we examined whether ChatGPT helps avoid cryptography issues. We found that developers frequently struggle with key and IV generations, as well as padding. Security is a top concern among developers, but security issues are pervasive in code snippets. ChatGPT can effectively aid developers when they engage with it properly. Nevertheless, it does not substitute human expertise, and developers should remain alert. |
| title | Time to Separate from StackOverflow and Match with ChatGPT for Encryption |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2406.06164 |