SandboxAQ, a quantum technology platform driven by artificial intelligence, has recently introduced Sandwich, an open-source framework designed to transform the way cryptography management is conducted. With the aim of promoting cryptographic agility, the platform provides developers with a unified API that allows for easy integration of chosen cryptographic algorithms into applications. This agility enables organizations to adapt to evolving technologies and threats without the need for extensive code rewrites.
One of the key advantages of Sandwich is its ability to empower developers with enhanced observability and control over cryptographic operations, thereby bolstering overall cybersecurity protocols. Graham Steel, head of product at SandboxAQ’s quantum security group, highlighted the fact that the traditional way of managing cryptography has struggled to keep up with the demands of new technology stacks and agile development practices. This framework aims to address this issue by simplifying the manipulation of cryptography at a low level and ensuring cryptography is used according to policy.
Sandwich abstracts cryptography from application code, resulting in a crypto-agile architecture that allows developers to easily update and replace algorithms as needed. By providing an API for cryptography layer updates, the framework ensures the integrity of applications without causing disruption or requiring additional coding.
The Sandwich framework incorporates libOQS, which streamlines access to novel post-quantum cryptography (PQC) algorithms developed by The National Institute of Standards and Technology (NIST). Furthermore, it supports multiple languages such as C/C++, Rust, Python, and Go, as well as operating systems like MacOS and Linux. This flexibility allows developers to work in their preferred coding environment and easily access various popular cryptographic libraries such as OpenSSL and BoringSSL, including new PQC algorithms from NIST.
Steel emphasized that the goal of supporting multiple languages, operating systems, and cryptographic libraries is to make it easier for developers to securely implement cryptography into their applications while providing customization options. Conventional cryptographic libraries often lack flexibility, but Sandwich aims to address this limitation.
The introduction of the Sandwich framework by SandboxAQ marks a significant milestone in revolutionizing cryptography management. By providing developers with a unified API and enabling cryptographic agility, this open-source framework has the potential to transform the way organizations handle cryptography and ensure robust cybersecurity protocols. With its focus on simplicity, observability, and control, Sandwich paves the way for enhanced cryptographic practices in the face of evolving technologies and future threats.
