References, CPSC 429, Winter 2008

Cryptographic Organizations (with online publication access)

• International Association for Cryptologic Research (IACR) homepage
• Accociation for Computing Machinery (ACM) homepage
• Institute of Electrical and Electronics Engineers, Inc. (IEEE) homepage
• Springer Verlag website, including CRYPTO, EUROCRYPT, etc. conference proceedings
• Electronic Frontier Foundation's DES cracker page

Standards Bodies

• National Institute of Standards and Technology (NIST)
• American National Standards Institute (ANSI)
• IEEE Standards Association
• The Internet Engineering Task Force (IETF)

Speicific Standards Pages

• NIST Cryptographic Toolkit (FIPS specs of various cryptographic standards) Includes DES, AES, SHA-1, HMAC, DSS, and many others
• NIST specification of the CMAC mode of operation
• NIST Guidelines for random number generation and testing
• Specification and reference implementation of SHA-1
• IETF RFC documents
• IETF Security Area
• IETF RFC 1750 (Randomness Recommendations for Security)
• IETF RFC 1760 (S/KEY)
• IETF RFC 2289 (OTP - one-time password, successor to S/KEY)
• IETF Kerberos Charter Homepage
• IETF PGP Charter Homepage
• IETF S/MIME Charter Homepage
• IETF TLS Charter Homepage
• IETF PKI (X.509) Charter Homepage

Cryptography Products and Companies

• RSA Laboratories Homepage (research and standards) Includes PKCS standards specs
• Certicom
• Verisign
• Kerberos
• PGP
• List of companies implementing IPSEC
• Netscape SSL Page

Cryptography Tools and Websites

• GnuPG (GNU open-source PGP)
• Enigmail (PGP plugin for Mozilla)
• OpenSSH
• OpenSSL
• OpenSSL documentation on libcrypto
• OpenSSL documentation on EVP (envelope) interface routines
• Apple developer connection documentation on EVP
• Apple developer connection documentation on the Openssl BIGNUM library (multiprecision integer arithmetic)
• Tutorial on encryption using libcrypto
• IBM tutorial on using the Openssl library

Java Cryptography Tools

• Java security Guides and APIs
• JCA Reference Guide (Java Cryptography Architecture)
• JSSE Reference Guide (Java Secure Socket Extension)

e-mail lists

• Bruce Schneier's CRYPTOGRAM newsletter (monthly)
• SANS newsletters (NewsBytes, Ouch!!!, PrivacyBits, etc...)
• SecurityFocus newsletters (BugTraq, SecurityFocus News, etc.)

Multiprecision Integer Arithmetic Packages

• GMP homepage
• NTL number-theory library homepage
• Java's BigInteger class, available through the JDK 6 API

Other References

• Tutorial on socket programming
• Handbook of Applied Cryptography
• Security Engineering
• Codes and Ciphers in WWII
• Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1 (D. Bleichenbacher) - must download from UofC machine
• Another Look at "Provable Security" (N. Koblitz and A.J. Menezes)
• Another Look at "Provable Security," II (N. Koblitz and A.J. Menezes)
• Security and Trust: What's the connection? (A. Josang, keynote presentation at PST 2005)
• Why Cryptosystems Fail (R. Anderson)