Links, CPSC 557 / 601.96, Winter 2006

Links

Cryptographic Organizations (with online publication access) International Association for Cryptologic Research (IACR) homepage Accociation for Computing Machinery (ACM) homepage Institute of Electrical and Electronics Engineers, Inc. (IEEE) homepage Springer Verlag website, including CRYPTO, EUROCRYPT, etc. conference proceedings Electronic Frontier Foundation's DES cracker page Standards Bodies National Institute of Standards and Technology (NIST) American National Standards Institute (ANSI) IEEE Standards Association The Internet Engineering Task Force (IETF) Speicific Standards Pages NIST Cryptographic Toolkit (FIPS specs of various cryptographic standards) Includes DES, AES, SHA-1, HMAC, DSS, and many others NIST specification of the CMAC mode of operation NIST Guidelines for random number generation and testing Specification and reference implementation of SHA-1 IETF RFC documents IETF Security Area IETF PKI X.509 homepage IETF RFC 1750 (Randomness Recommendations for Security) IETF RFC 1760 (S/KEY) IETF RFC 2289 (OPT - one-time password, successor to S/KEY) IETF RFC 1510 (Kerberos V5) IETF SSH Charter Homepage IETF PGP Charter Homepage IETF S/MIME Charter Homepage IETF IPsec Charter Homepage IETF TLS Charter Homepage Cryptography Products and Companies RSA Laboratories Homepage (research and standards) Includes PKCS standards specs Certicom Verisign Kerberos PGP List of companies implementing IPSEC Netscape SSL Page SET Page Professional Certification Certified Information Systems Security Professionals Certified Ethical Hacker Network Security Computer Emergency Response Team (CERT) SysAdmin, Audit, Network, Security (SANS) network security material, including list of top 20 vulnerabilities Common Vulnerabilities and Exposures list (CVE) Computer Incident Advisory Capability (CIAC) SecurityFocus List of port number assignments The Honeynet Project SOCKS Security Tools and Websites OpenSSH GnuPG (GNU open-source PGP) Enigmail (PGP plugin for Mozilla) Snort (open source IDS) Tripwire (file modification detector) nmap (port scanning tool) nessus (port scanner and vulnerability tester) ZoneAlarm (software firewall for Windows) VisualZone (ZoneAlarm log analyzer) DShield (distributed IDS) Bugnosis (web bug alerts) Netcraft toolbar (phishing info) Trend Micro (free virus and spyware scans) GRC (various security tools, ShieldsUp! firewall tester) 419eater (anti-419 scam site) 419baiter (another anti-419 scam site) Calgary Police Crime Prevention (ID theft and information security information) Security Tools and Websites OpenSSL OpenSSL documentation on libcrypto OpenSSL documentation on EVP (envelope) interface routines Apple developer connection documentation on EVP Apple developer connection documentation on the Openssl BIGNUM library (multiprecision integer arithmetic) Tutorial on encryption using libcrypto IBM tutorial on using the Openssl library e-mail lists Bruce Schneier's CRYPTOGRAM newsletter (monthly) SANS newsletters (NewsBytes, Ouch!!!, PrivacyBits, etc...) SecurityFocus newsletters (BugTraq, SecurityFocus News, etc.) Multiprecision Integer Arithmetic Packages GMP homepage NTL number-theory library homepage Other References Handbook of Applied Cryptography Tutorial on socket programming