Jumping through hoops: why do Java developers struggle with cryptography APIs?
Why does cryptographic software fail?: a case study and open problems