Links, CPSC/PMAT 669, Fall 2010

Links

Cryptographic Organizations (with online publication access) International Association for Cryptologic Research (IACR) homepage Includes eprint archive. Accociation for Computing Machinery (ACM) homepage Institute of Electrical and Electronics Engineers, Inc. (IEEE) homepage Springer Verlag website, including CRYPTO, EUROCRYPT, etc. conference proceedings Standards Bodies National Institute of Standards and Technology (NIST) American National Standards Institute (ANSI) IEEE Standards Association The Internet Engineering Task Force (IETF) Speicific Standards Pages NIST Cryptographic Toolkit (FIPS specs of various cryptographic standards) Includes DES, AES, SHA-1, HMAC, DSS, and many others NIST specification of the CMAC mode of operation NIST Guidelines for random number generation and testing Specification and reference implementation of SHA-1 IETF RFC documents IETF Security Area IETF PKI X.509 homepage IETF RFC 1750 (Randomness Recommendations for Security) IETF RFC 1760 (S/KEY) IETF RFC 2289 (OTP - one-time password, successor to S/KEY) IETF Kerberos RFCs IETF SSH Charter Homepage IETF PGP Charter Homepage IETF S/MIME Charter Homepage IETF IPsec Charter Homepage IETF TLS Charter Homepage Cryptography Products and Companies RSA Laboratories Homepage (research and standards) Includes PKCS standards specs Certicom Verisign Kerberos PGP List of companies implementing IPSEC Example VPN for mobile devices Cryptography Tools and Websites GnuPG (GNU open-source PGP) Enigmail (PGP plugin for Mozilla) OpenSSH OpenSSL OpenSSL documentation on libcrypto OpenSSL documentation on EVP (envelope) interface routines Apple developer connection documentation on EVP Apple developer connection documentation on the Openssl BIGNUM library (multiprecision integer arithmetic) Tutorial on encryption using libcrypto IBM tutorial on using the Openssl library Bugnosis (web bug alerts) Netcraft toolbar (phishing info) Calgary Police Crime Prevention (ID theft and information security information) e-mail lists Bruce Schneier's CRYPTOGRAM newsletter (monthly) SANS newsletters (NewsBytes, Ouch!!!, PrivacyBits, etc...) SecurityFocus newsletters (BugTraq, SecurityFocus News, etc.) Multiprecision Integer Arithmetic Packages GMP homepage NTL number-theory library homepage Other References Handbook of Applied Cryptography by Menezes, van Oorschot, and Vanstone is freely-available online. This is a comprehensive reference of many basic cryptographic primitives. Introduction to Modern Cryptography by J. Katz and Y. Lindell (Chapman & Hall/CRC 2008) - good textbook covering cryptography from a modern perspective. Mathematical Recreations and Essays by W. W. Rouse Ball. This is a free e-book. Chapter 11 (written by A. Sinkov) is an excellent survey of classical ciphers. Security Engineering by R. Anderson is a good reference on applying cryptography and security techniques in practice. Codes and Ciphers in WWII Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1 (D. Bleichenbacher) Another Look at "Provable Security" (N. Koblitz and A.J. Menezes) Another Look at "Provable Security," II (N. Koblitz and A.J. Menezes) Security and Trust: What's the connection? (A. Josang, keynote presentation at PST 2005) Why Cryptosystems Fail (R. Anderson)