What are some differences between “open” and “closed” cryptographic interfaces?
Open cryptographic interfaces (OCIs) allow customers or other parties to insert their own cryptography, such as algorithms and key exchange mechanisms, without any intervention, help, or assistance from the manufacturer or its agents. An encryption product with an OCI provides an “open door” for the use of encryption that has not been authenticated or otherwise enabled for use with the product and must be disclosed to Qualcomm to apply for the proper export license. By contrast, an encryption product which uses digital signatures, static binding or other proprietary means to restrict access to the underlying cryptography is said to have a “closed” cryptographic interface.
