Cryptography and Security

	Privacy International (Material on ID cards)
	USENIX
	Voters Telecommunications Watch (VTW)
	SANS
	SecurityPortal Commercial Enterprises AccessData Alcatel. Anonymize.net AT&T: FTP Server AT&T Labs Crowds pages Algorithmic Research ASG Technologies Axent Baltimore Technologies BlueMoney BroadVision CertCo CertiCom CipherLink Codex Computer Systems Consulting (CSC): COST (Computer Security Technologies) Counterpane Internet Security, Inc. Counterpane Labs. Cryptomathic Cybercash CygnaCom Solutions, Inc. DataKey DEC SRC publications (Especially reports 125, 117, 83, 70, 67, 39.) Digicash. ECash. ecomsecurity.com En Garde Systems. EIT (Enterprise Integration Technology). Entrust Technologies Exodus Communications F-Secure Firewall Security Corp. Frontier Technologies Global Technology Associates Globeset Guardent Harris Computer Systems Hewlett-Packard IBM T.J.Watson Network Security Group IBM Zurich Security Research Group IBM Security Overview ICSA.net Internet Security Systems, Inc. KonaSoft Los Altos Technologies. Mach 5 (and their crypto page) Management Analytics Microsoft. Mondex Morning Star Technologies NEC security server NetChex Netegrity Netscape Netsys Network Associates Network Warriors NewGenPay Open Market. OpenNetwork Technologies. OpenTV. Odyssey Research Associates (Recluse Web Security System) PC Dynamics SafeHouse Encryption Plus Five Consulting, Inc. RedCreek RPK SecureMedia Rocksoft RSA Security RSA Laboratories RSA's Cryptography FAQ. Factoring Challenge CryptoBytes SAIC (Science Applications International Corp.) Schlumberger Smart Cards (Cryptoflex for Windows 2000 Program) SECUDE GmbH Security Dynamics (Name changed to RSA Security) Secure Solutions Experts (SSE, a Siemens company) SecurityTracker Spyrus. Steptoe and Johnson LLP (Many papers on crypto policy and law; Stewart Baker works here; see "Law and the Net" here. SUN Microsystems. Frequently Asked Questions -- Applet Security (from JavaSoft) Surety Technologies. Telcordia (General), Telcordia Security Products Ultimate Privacy VeriFone VeriSign Visa V-ONE Xcert Zaxus (formerly Racal Security and Payments) Zero Knowledge University Sites and Course Material Catholic University of Louvain (UCL) Crypto Group U.C. Berkeley ISAAC Group Cambridge University Carnegie Mellon: The NetBill Electronic Commerce Project Carnegie Mellon: The Software Engineering Institute (SEI) Clemson - Introduction to Cryptography course by Shuhong Gao Dartmouth Security Tools Matt Bishop's collection; including passwd+. George Mason University - Center for Secure Information Systems Georgia Tech - Network Security course by Ken Calvert Graz University of Technology: Institute for Applied Information Processing and Communications Leuven EE Dept Crypto offerings McGill University: Cryptography and Quantum Information Laboratory UMBC Security Technology Research Group (STRG), UMBC Institute for Global Electronic Commerce (IGEC) MIT: MIT's Athena FTP Server Kerberos, X, Usenix papers, etc. Hal Abelson's course, "Ethics and Law on the Electronic Frontier" Avi Rubin's Fall 95 NYU course Cryptography and Computer Security Princeton's Secure Internet Programming Group Purdue COAST Project (Computer Operations, Audit and Security Tools) Purdue CERIAS Project (Center for Information and Research in Information Assurance and Security) GRECC (Group de Recherche en Complexite et Cryptographie) at the Ecole Normale Superieure in Paris. Texas AMU security tools. UC Davis Security Lab. University of Montreal. University of New Mexico: Kevin McCurley's course, Cryptology in Computing University of Southern California (Information Sciences Institute; Global Operating Systems Technology (GOST) Group) Worcester Polytechnic Cryptographic Research Center, FER, Zagreb, Croatia Other Sites Andy Talisker's Intrusion Detection Systems Root Shell The Internet Underground DigiCrime, Inc Electronic Colloquium on Computational Complexity ACM Security, Audit & Control (SIGSAC) The Cypherpunks Home Page. The Cypherpunks HyperArchive. SRI Computer Science Lab. SRI has responsibility for the ACM Forum on Risks in the Use of Computer and Related Systems. SRI WWW Server SRI's NIDES Next-Generation Intrusion Detection System Greatcircle FTP Server Firewall documents and mailing list. SURA FTP Server SURAnet security archive. They have CERT and CIAC alerts, NIST publications, Department of Defense Alerts, pagers, security programs, etc... DDN Security Bulletins FTP Server This is the NIC's security ftp server. Skip all the files starting with ddn-security- until you get down to ddn-security-8901. All the previous ones will just tell you that the naming conventions have changed, and you're looking at the wrong file. Books and Publishers Author's Instructions Aegean Park Press Applied Cryptography, by Bruce Schneier. Chicago Journal of Theoretical Computer Science CRC Press Cryptography: Theory and Practice, by Doug Stinson. Firewalls and Internet Security: Repelling the Wily Hacker, by Cheswick and Bellovin. Foundations of Cryptography, by Oded Goldreich. Handbook of Applied Cryptography, by Menezes, van Oorschot, and Vanstone. Journal of Computer Security Rethinking Public Key Infrastructures and Digital Certificates Building in Privacy, by Stefan Brands. Secrets and Lies: Digital Security in a Networked World, by Bruce Schneier. Securing Java, by McGraw and Felten. Springer-Verlag Lecture Notes in Computer Science News Groups, News Letters, and FAQ's Anonymous remailer FAQ Cipher, the newsletter of the Technical Committee on Security and Privacy of the Computer Society of the IEEE. Their calendar of upcoming events. sci.crypt (FAQ) sci.crypt.research Coderpunks Archive talk.politics.crypto comp.security.misc (FAQ) (FAQ) alt.security comp.security.announce alt.security.pgp alt.security.keydist alt.security.ripem comp.security.unix (FAQ) comp.protocols.kerberos comp.virus (FAQ) comp.risks FAQ for Firewalls Cryptography FAQ Alert Sites NASIRC - NASA Incident Response Center CERT (Computer Emergency Response Center at CMU) and ASSIST - Automated Systems Security Incident Support Team (DOD-CERT) German DFN-CERT CIAC (Computer Incident Advisory Capability (DOE/LLNL) FIRST - Forum of Incident Response and Security Teams AusCERT - Australian Computer Emergency Response Team People (Limited to people with home pages relevant to crypto/security; very incomplete...) Kevin McCurley's list of cryptographer's home pages   Abadi, Martin Agnew, Gordon Anderson, Ross Back, Adam Bellare, Mihir Berson, Tom Biham, Eli Blaze, Matt Bleichenbacher, Daniel Blum, Avrim Boneh, Dan Boyar, Joan Brassard, Gilles Brands, Stefan Chaum, David Camenisch, Jan Chor, Benny Crepeau, Claude Dai, Wei Davis, Don Denning, Dorothy Ding, Cunsheng Ellison, Carl M. Finney, Hal Froomkin, A. Michael Goldreich, Oded Goldwasser, Shafi Gutman, Peter Hastad, Johan Herzberg, Amir Hoffman, Lance Jakobsson, Markus Jim, Trevor Kaliski, Burton Klapper, Andy Knudsen, Lars Kocher, Paul LaMacchia, Brian Lenstra, Hendrik W., Jr. Mao, Wenbo Manasse, Mark Maurer, Ueli McCurley, Kevin Naor, Moni Neumann, Peter Odlyzko, Andrew Ostrovsky, Rafail Quisquater, Jean-Jacques Rabin, Michael Ritter, Terry Rivest, Ronald L. Rogaway, Phil Rudich, Steven Schiller, Jeff Schneier, Bruce Sherman, Alan Shostack, Adam Shoup, Victor Stern, Jacques Stiglic, Anton Stinson, Doug and his book, Cryptography: Theory and Practice. Stubblebine, Stuart Tsiounis, Yiannis Tygar, Doug Vaudenay, Serge Wagner, David Yee, Bennet Algorithms, Protocols, Etc. Specific algorithms, protocols, etc. Encryption/decryption algorithms Knudsen's Block Cipher Lounge   CAST (Also see this.) RC2: For information about RC2 contact RSA Data Security. RC4: For information about RC4 contact RSA Data Security. Also: RC4 brute-force search RC4 in 3 lines Payment protocols iKP (IBM Zurich) (renamed to SEPP in conjuction with Mastercard). Millicent NetCheque SET (Secure Electronic Transaction; Visa and Mastercard) ASN.1 Layman's introduction from RSA CDSA (Intel's Common Data Security Architecture) Cryptolopes (IBM) Crypto API (Microsoft) MD5 (RFC1321) PICS SKEME (Hugo Krawczyk, IBM) SKey (Bell Canada's implementation) S/MIME SSL 3.0 SSL 3.0 SSL (Netscape) SSL (Eric Young's implementation) S/WAN Software (This is software you can download; not commercial software, unless there is a free downloadable copy.) Adam Shostack's list   Sites with many routines or packages available Wimsey Crypto collection (new) Michael Paul Johnson's collection TrustedWeb (from Siemens/Nixdorf) Software collections, toolkits, and packages with many different routines Crypto CD COPS (CERT; unix security toolkit) Cryptographic Extensions for Java and Perl (Cryptics) Crypto++ by Wei Dai. LiDIA (number-theory package). LInteger (C++ supporting multiple precision integers). SKIP IP layer encryption/key management software (SUN) Implementations of individual algorithms or protocols