Cryptography and Security

(No longer maintained -- link farms seem out-of-date now that search engines are so good!) This page contains pointers to other web pages dealing with cryptography and security, organized into the following sections:

Conferences
Other compilations of links
Bibliographies
Government Sources
Non-Profit Organizations and Associations
Commercial Enterprises
University Sites and Course Material
Other Sites
Books and Publishers
News Groups, Newsletters, and FAQ's
Alert Sites
People
Algorithms, Protocols, Etc.
Software
Number Theory Links
Miscellaneous

((Please send additions and corrections to rivest@theory.lcs.mit.edu; thanks to Anselm Blumer for numerous improvements!))

Conferences

(Also see the IACR Calendar and the Cipher Newsletter calendar.)

Asiacrypto 2000 (12/3/00--12/7/00; deadline 5/25/00; Kyoto, Japan)
Workshop on Coding and Cryptography (1/8/00--1/12/00; deadline 9/15/2000; Paris, France)
NDSS '01
CFP '01
RSA 2001 (4/8/01--4/12/01; San Francisco)

Other compilations of links

Bibliographies

Government Sources

CESG: Communications-Electronic Security Group (in U.K.)
DARPA
FBI
NIH (National Institutes of Health) page on Unix Security
NIST (National Institute of Standards and Technology)
NRC (National Research Council; Computer Science and Telecommunications Board)
- Their excellent study on cryptographic policy
NSA (National Security Agency)
NSF (National Science Foundationa)
U.S. Patent and Trademark Office

Non-Profit Organizations and Associations

ABA (American Bar Association; Electronic Commerce and Information Technology Division; Digital Signature Guidelines)
ACM (Association for Computing Machinery)
- Their report: Codes, Keys, and Conflicts: Issues in U.S. Crypto Policy (1994).
- The ACM SIGACT home page.
ANSI (American National Standards Institute)
BSA (Business Software Alliance)
CDT (Center for Democracy and Technology)
- Encryption Policy Resource Page
Computer Security Institute
CPSR (Computer Professionals for Social Responsibility).
EFF (Electronic Frontier Foundation).
EPIC (Electronic Privacy Information Center).
Foundation for Information Policy Research
IACR (International Association for Cryptologic Research).
IEEE Computer Society.
- IEEE P1363 standards committee
IFCA (International Financial Cryptography Association)
Internet Privacy Coalition
Internet RFC's
Internet Society
- IPSEC web page
OpenNetwork Technologies

Privacy International (Material on ID cards)

Voters Telecommunications Watch (VTW)

Commercial Enterprises

University Sites and Course Material

Catholic University of Louvain (UCL) Crypto Group
U.C. Berkeley ISAAC Group
Cambridge University
Carnegie Mellon: The NetBill Electronic Commerce Project
Carnegie Mellon: The Software Engineering Institute (SEI)
Clemson - Introduction to Cryptography course by Shuhong Gao
Dartmouth Security Tools Matt Bishop's collection; including passwd+.
George Mason University - Center for Secure Information Systems
Georgia Tech - Network Security course by Ken Calvert
Graz University of Technology: Institute for Applied Information Processing and Communications
Leuven EE Dept Crypto offerings
McGill University: Cryptography and Quantum Information Laboratory
UMBC Security Technology Research Group (STRG), UMBC Institute for Global Electronic Commerce (IGEC)
MIT:
- MIT's Athena FTP Server Kerberos, X, Usenix papers, etc.
- Hal Abelson's course, "Ethics and Law on the Electronic Frontier"
Avi Rubin's Fall 95 NYU course Cryptography and Computer Security
Princeton's Secure Internet Programming Group
Purdue COAST Project (Computer Operations, Audit and Security Tools)
Purdue CERIAS Project (Center for Information and Research in Information Assurance and Security)
GRECC (Group de Recherche en Complexite et Cryptographie) at the Ecole Normale Superieure in Paris.
Texas AMU security tools.
UC Davis Security Lab.
University of Montreal.
University of New Mexico: Kevin McCurley's course, Cryptology in Computing
University of Southern California (Information Sciences Institute; Global Operating Systems Technology (GOST) Group)
Worcester Polytechnic
Cryptographic Research Center, FER, Zagreb, Croatia

Other Sites

Andy Talisker's Intrusion Detection Systems
Root Shell
The Internet Underground
DigiCrime, Inc
Electronic Colloquium on Computational Complexity
ACM Security, Audit & Control (SIGSAC)
The Cypherpunks Home Page.
The Cypherpunks HyperArchive.
SRI Computer Science Lab. SRI has responsibility for the ACM Forum on Risks in the Use of Computer and Related Systems. SRI WWW Server SRI's NIDES Next-Generation Intrusion Detection System
Greatcircle FTP Server Firewall documents and mailing list.
SURA FTP Server SURAnet security archive. They have CERT and CIAC alerts, NIST publications, Department of Defense Alerts, pagers, security programs, etc...
DDN Security Bulletins FTP Server This is the NIC's security ftp server. Skip all the files starting with ddn-security- until you get down to ddn-security-8901. All the previous ones will just tell you that the naming conventions have changed, and you're looking at the wrong file.

Books and Publishers

Author's Instructions

Aegean Park Press
Applied Cryptography, by Bruce Schneier.
Chicago Journal of Theoretical Computer Science
CRC Press
Cryptography: Theory and Practice, by Doug Stinson.
Firewalls and Internet Security: Repelling the Wily Hacker, by Cheswick and Bellovin.
Foundations of Cryptography, by Oded Goldreich.
Handbook of Applied Cryptography, by Menezes, van Oorschot, and Vanstone.
Journal of Computer Security
Rethinking Public Key Infrastructures and Digital Certificates Building in Privacy, by Stefan Brands.
Secrets and Lies: Digital Security in a Networked World, by Bruce Schneier.
Securing Java, by McGraw and Felten.
Springer-Verlag Lecture Notes in Computer Science

News Groups, NewsLetters, and FAQ's

Anonymous remailer FAQ
Cipher, the newsletter of the Technical Committee on Security and Privacy of the Computer Society of the IEEE. Their calendar of upcoming events.
sci.crypt (FAQ)
sci.crypt.research
Coderpunks Archive
talk.politics.crypto
comp.security.misc (FAQ) (FAQ)
alt.security
comp.security.announce
alt.security.pgp
alt.security.keydist
alt.security.ripem
comp.security.unix (FAQ)
comp.protocols.kerberos
comp.virus (FAQ)
comp.risks
FAQ for Firewalls
Cryptography FAQ

Alert Sites

People

(Limited to people with home pages relevant to crypto/security; very incomplete...)

Kevin McCurley's list of cryptographer's home pages

Algorithms, Protocols, Etc.

Specific algorithms, protocols, etc.

Encryption/decryption algorithms
Knudsen's Block Cipher Lounge
- CAST (Also see this.)
- RC2: For information about RC2 contact RSA Data Security.
- RC4: For information about RC4 contact RSA Data Security. Also:
  - RC4 brute-force search
  - RC4 in 3 lines
Payment protocols
- iKP (IBM Zurich) (renamed to SEPP in conjuction with Mastercard).
- Millicent
- NetCheque
- SET (Secure Electronic Transaction; Visa and Mastercard)
- ASN.1 Layman's introduction from RSA
- CDSA (Intel's Common Data Security Architecture)
- Cryptolopes (IBM)
- Crypto API (Microsoft)
- MD5 (RFC1321)
- PICS
- SKEME (Hugo Krawczyk, IBM)
- SKey (Bell Canada's implementation)
- S/MIME
- SSL 3.0 SSL 3.0 SSL (Netscape) SSL (Eric Young's implementation)
- S/WAN
Software
(This is software you can download; not commercial software, unless there is a free downloadable copy.)
Adam Shostack's list
- Sites with many routines or packages available
  - Wimsey Crypto collection (new)
  - Michael Paul Johnson's collection
  - TrustedWeb (from Siemens/Nixdorf)
- Software collections, toolkits, and packages with many different routines
  - Crypto CD
  - COPS (CERT; unix security toolkit)
  - Cryptographic Extensions for Java and Perl (Cryptics)
  - Crypto++ by Wei Dai.
  - LiDIA (number-theory package).
  - LInteger (C++ supporting multiple precision integers).
  - SKIP IP layer encryption/key management software (SUN)
- Implementations of individual algorithms or protocols
  - John Halleck's validated implementation of SHA-1 (in Ada)
  - Elliptic curve implementations from Hilarie Orman and Rich Schroeppel
  - DES (Eric Young's implementation)
  - MD5 (in C, as distributed by RSA DSI)
  - MD5 (in C++, prepared by Mordechai T. Abzug, mabzug1@umbc.edu)
  - PGP
  - MIT PGP key-server
  - PGPFone
  - RIPEM
  - SATAN (Security Administrator's Tool for Analyzing Networks)
  - SFS (Secure File System for DOS and Windows)
  - SSH (Secure Shell)
  - KeyNote Trust Management System
NumberTheory
- NumberTheory Web
- Kevin McCurley's bibliography on computational number theory
- The Prime Pages (by Chris Caldwell, University of Tennesee)
- RSA Factoring by Web Project
- RSA Factoring Challenge
- NTL--A Library for Doing Number Theory
Miscellaneous
(Mostly various pointers I have collected or been sent, but which I haven't yet explored or categorized. Some of these will be moved to other categories, once I explore them.)
Return to Ron Rivest's home page.