Cryptography and Security

• Conferences
• Other compilations of links
• Bibliographies
• Government Sources
• Non-Profit Organizations and Associations
• Commercial Enterprises
• University Sites and Course Material
• Other Sites
• Books and Publishers
• News Groups, Newsletters, and FAQ's
• Alert Sites
• People
• Algorithms, Protocols, Etc.
• Software
• Number Theory Links
• Miscellaneous

• Financial Cryptography '00 (2/21/00--2/24/00; Anguilla)
• FSE 2000 (4/10/00--4/12/00; deadline 12/31/99; NYC)
• AES3 (4/13/00--4/14/00; deadline 1/15/00; NYC)
• RSA 2000 Europe (4/10/00-4/13/00; deadline 11/5/99; Munich)
• EuroCrypt 2000 (5/14/00--5/18/00; deadline 11/3/99; Bruges)
• STOC 2000 (5/21/00--5/23/00; Portland Oregon)
• Fifth International Workshop on Enterprise Security(6/14/00-6/16/00; deadline 3/10/00; NIST)
• SAC 2000 (8/14/00--8/15/00; deadline 5/1/00; Waterloo)
• Crypto 2000 (8/20/00--8/24/00; deadline ??; Santa Barbara)
• ISSE 2000 (9/27/00--9/29/00; deadline 4/3/00; Barcelona)
• FOCS 2000 (11/12/00--11/14/00; deadline 4/28; Redondo Beach)
• Asiacrypto 2000 (12/3/00--12/7/00; deadline 5/25/00; Kyoto, Japan)
• RSA 2001 (4/8/01--4/12/01; San Francisco)

• Tom Dunigan's collection of links
• Vincent Cate's Cypherpunk page
• Canadian crypto links
• CNS (Computing and Network Services, Luxembourg)
• Cryptography in Europe
• Cryptography, PGP, and Your Privacy (Part of the WWW Virtual Library Subject Catalogue.)
• Cryptolog collection of links
• Cryptosoft links to crypto publications
• Ron Davie's Electronic Money and Money in History
• EINet Galaxy's Security Page.
• Security page from Henry W. Farkas
• Pat Farrell's collection of links
• Finnish compilation
• Oded Goldreich's Theory of Cryptography Library
• Peter Gutmann's Security and Encryption-related Resources and Links
• Italian compilation
• Bert-Jaap Koops survey of crypto regulations world-wide
• David Jablon's collection of links on password-only authentication.
• Mukund Mohan's crypto home page ([email protected]).
• Richard Pinch's compilation
• Bruce Schneier's list
• Sirene's Security and Cryptography page (IBM Zurich). See also Sirene (Security in Computer Networks)
• Spaf's (Gene Spafford's) Hotlist on Computer Security, Law, Privacy
• Matt Thomlinson's page (U. Wash)
• Yahoo's Security And Encryption Page
• John Young's crypto page
• Bennet Yee's Security-Related Net Pointers (from CMU)
• World Wide Web Consortium
  • Security Overview
  • Payments Overview

• Lawrie Brown's (searchable) cryptography bibliography
• IACR Conference Proceedings, by Author Name
• Sean Irvine's collection
• Journal of Cryptology bibliography and table of contents (from IACR).
• Kevin McCurley's bibliography on computational number theory
• Itribe (Cryptography Technical Report Server)
• Quantum Computing Bibliography from University of Montreal.
• Ron Rivest's Crypto and Security bibliography (Bibtex).
• CS bibliographies, including STOC and FOCS
• Doug Stinson's bibliography on authentication codes
• Doug Stinson's bibliography on secret sharing schemes
• Unified Computer Science Technical Report Index

• CESG: Communications-Electronic Security Group (in U.K.)
• DARPA
• FBI
• NIH (National Institutes of Health) page on Unix Security
• NIST (National Institute of Standards and Technology)
  • Computer Systems Laboratory.
  • Computer Security Resource Clearinghouse
  • AES (Advanced Encryption Standard) page
• NRC (National Research Council; Computer Science and Telecommunications Board)
  • Their excellent study on cryptographic policy
• NSA (National Security Agency)

• ABA (American Bar Association; Electronic Commerce and Information Technology Division; Digital Signature Guidelines)
• ACM (Association for Computing Machinery)
  • Their report: Codes, Keys, and Conflicts: Issues in U.S. Crypto Policy (1994).
• ANSI (American National Standards Institute)
• BSA (Business Software Alliance)
• CDT (Center for Democracy and Technology)
• Commerce Net
• CPSR (Computer Professionals for Social Responsibility).
• EFF (Electronic Frontier Foundation).
• EPIC (Electronic Privacy Information Center).
• Encryption Policy Resource Page
• Foundation for Information Policy Research
• Global Internet Project
• IACR (International Association for Cryptologic Research).
• IEEE P1363 standards committee
• IFCA (International Financial Cryptography Association)
• Internet Privacy Coalition
• Internet Society
  • Internet PCA Registration Authority
  • IPSEC web page
• Key Recovery Alliance
• NCSA (National Computer Security Association)
• Privacy International (Material on ID cards)
• USENIX
• Voters Telecommunications Watch (VTW)

• AccessData
• AT&T:
  • FTP Server
  • Bell Labs
  • Crowds pages
• Algorithmic Research
• Atlantic Systems Group
• Baltimore Technologies
• Bellcore (General), Bellcore Security Products, and Betsi
• BlueMoney
• BroadVision
• CertCo
• CertiCom
• Codex
• Cohesive Systems
• Computer Systems Consulting (CSC): CSC Security Gopher
• Consensus Development
• COST (Computer Security Technologies)
• Counterpane Internet Security, Inc.
  Counterpane Labs.
• Cryptomathic
• Cybercash
• CygnaCom Solutions, Inc.
• Cygnus Support and their Security brochure. Cryptography Export Control Archives.
• Data Fellows Ltd.
• DataKey
• DEC SRC publications (Especially reports 125, 117, 83, 70, 67, 39.) Digital Secure Systems Index
• Digicash.
• En Garde Systems.
• EIT (Enterprise Integration Technology).
• Entrust Technologies
• Firewall Security Corp.
• First Virtual
• Fronter Technologies
• FSA Corporation
• Global Technology Associates
• Harris Computer Systems
• Hewlett-Packard
• IBM T.J.Watson Network Security Group
• IBM Zurich Security Research Group
• IBM SecureWay
• Internet Security Systems, Inc.
• Isolation Systems
• Keywitness Canada
• KonaSoft
• Lockeed Martin Advanced Technology Labs (Cypris processor).
• Los Altos Technologies.
• Mach 5 (and their crypto page)
• Management Analytics
• Mastercard's Secure Electronic Payment Protocol
• Microsoft.
• Mondex
• Morning Star Technologies
• NEC security server
• NetChex
• Netegrity
• Netscape
• Open Market.
• Odyssey Research Associates (Recluse Web Security System)
• PC Dyanamics
• Plus Five Consulting, Inc.
• NSC (Network Systems Corp.)
• Quadralay Corporation. Crypto page
• Racal (Data Group)
• Raptor Systems markets firewalls and has a nice security library.
• RedCreek
• RPK Inc
• Rocksoft
• RSA Security
  • RSA Laboratories
  • RSA's Cryptography FAQ.
  • CryptoBytes
• SAIC (Science Applications International Corp.)
• SECUDE GmbH
• SecureWare
• Security Dynamics (Name changed to RSA Security)
• Seven Locks Software, Inc."
• Software and Systems Engineering Ltd (SSE)
• Spry.
• Spyglass. API spec
• Steptoe and Johnson LLP (Many papers on crypto policy and law; Stewart Baker works here; see "Law and the Net" here.
• SUN Microsystems.
  Frequently Asked Questions -- Applet Security (from JavaSoft)
• Surety Technologies.
• Tansu (Telecom Australia)'s Computer and Network Security Reference Index.
• Terisa Systems.
• TimeStep Corp.
• Terzcat Communications (Mike Scher, [email protected]): Security pages top level
• Trusted Information Systems (TIS)
• Ultimate Privacy
• VeriFone
• VeriSign
• ViaCrypt
• Visa
• V-ONE
• Xcert
• Zero Knowledge

• Catholic University of Louvain (UCL) Crypto Group
• Cambridge University
• Carnegie Mellon: The NetBill Electronic Commerce Project
• Carnegie Mellon: The Software Engineering Institute (SEI)
• Clemson - Introduction to Cryptography course by Shuhong Gao
• Dartmouth Security Tools Matt Bishop's collection; including passwd+.
• Duke - Introduction to Cryptography course by Jingmin He
• George Mason University - Center for Secure Information Systems
• George Washington University - Telecommunications Security course by John Pescatore
• Georgia Tech - Network Security course by Ken Calvert
• Graz University of Technology: Institute for Applied Information Processing and Communications
• Indiana University: (Riordan's RIPEM page).
• Leuven EE Dept Crypto offerings
• UMBC Security Technology Research Group (STRG), UMBC Institute for Global Electronic Commerce (IGEC)
• MIT:
  • MIT's Athena FTP Server Kerberos, X, Usenix papers, etc.
  • Hal Abelson's course, "Ethics and Law on the Electronic Frontier"
  • Ron Rivest's Fall 95 MIT course, "Computer and Network Security"
• Avi Rubin's Fall 95 NYU course Cryptography and Computer Security
• Princeton's Secure Internet Programming Group
• Purdue COAST Project (Computer Operations, Audit and Security Tools)
• GRECC (Group de Recherche en Complexite et Cryptographie) at the Ecole Normale Superieure in Paris.
• Rutgers University Network Services page on World Wide Web Security
• Texas AMU security tools.
• UC Davis Security Lab.
• University of Montreal.
• University of New Mexico: Kevin McCurley's course, Cryptology in Computing
• University of Southern California (Information Sciences Institute; Global Operating Systems Technology (GOST) Group)
• Worchester Polytechnic
• Cryptographic Research Center, FER, Zagreb, Croatia

• Root Shell
• The Internet Underground
• DigiCrime, Inc
• Electronic Colloquium on Computational Complexity
• ACM Security, Audit & Control (SIGSAC)
• The Cypherpunks Home Page.
• SRI Computer Science Lab. SRI has responsibility for the ACM Forum on Risks in the Use of Computer and Related Systems. SRI WWW Server SRI's NIDES Next-Generation Intrusion Detection System
• Christopher L. Menegay's Security page This site contains explicit information about how to break into Unix systems, and gives countermeasures.
• Greatcircle FTP Server Firewall documents and mailing list.
• SURA FTP Server SURAnet security archive. They have CERT and CIAC alerts, NIST publications, Department of Defense Alerts, pagers, security programs, etc...
• DDN Security Bulletins FTP Server This is the NIC's security ftp server. Skip all the files starting with ddn-security- until you get down to ddn-security-8901. All the previous ones will just tell you that the naming conventions have changed, and you're looking at the wrong file.

• Aegean Park Press
• Applied Cryptography, by Bruce Schneier.
• CRC Press
• Securing Java, by McGraw and Felten.
• Cryptography: Theory and Practice, by Doug Stinson.
• Firewalls and Internet Security: Repelling the Wily Hacker, by Cheswick and Bellovin.
• Foundations of Cryptography, by Oded Goldreich.
• Handbook of Applied Cryptography, by Menezes, van Oorschot, and Vanstone.
• Journal of Computer Security

• Anonymous remailer FAQ
• Cipher, the newsletter of the Technical Committee on Security and Privacy of the Computer Society of the IEEE. Their calendar of upcoming events.
• sci.crypt (FAQ)
• sci.crypt.research
• Hell's Kitchen Software (Coderpunks archives)
• talk.politics.crypto
• comp.security.misc (FAQ) (FAQ) (FAQ)
• alt.security (FAQ) (FAQ)
• comp.security.announce
• sura.security
• WWW-buyinfo
• alt.security.pgp (FAQ)
• alt.security.keydist
• alt.security.ripem (FAQ)
• comp.security.unix (FAQ) (FAQ)
• comp.protocols.kerberos
• comp.virus (FAQ)
• comp.risks
• FAQ for alt.security.misc
• FAQ for Firewalls
• FAQ for Privacy Enhanced Mail (PEM)
• Cryptography FAQ

• NASIRC - NASA Automated Systems Incident Response Capability
• CERT (Computer Emergency Response Center at CMU) and ASSIST - Automated Systems Security Incident Support Team
• DDN - DEFENSE DATA NETWORK
• German DFN-CERT
• CIAC (Computer Incident Advisory Capability (DOE/LLNL)
• FIRST - Forum of Incident Response and Security Teams
• AUSERT - Australian Security Emergency Response Team

Kevin McCurley's list of cryptographer's home pages

• Abadi, Martin
• Agnew, Gordon
• Anderson, Ross
• Beaver, Don
• Bellare, Mihir
• Berson, Tom
• Biham, Eli
• Blum, Avrim
• Boneh, Dan
• Boyar, Joan
• Brassard, Gilles
• Brands, Stefan
• Chaum, David
• Camenisch, Jan
• Chor, Benny
• Crepeau, Claude
• Dai, Wei
• Davis, Don
• Denning, Dorothy
• Ellison, Carl M.
• Finney, Hal
• Froomkin, A. Michael
• Goldreich, Oded
• Goldwasser, Shafi
• Gutman, Peter
• Hastad, Johan
• Hoffman, Lance
• Jakobsson, Markus
• Jim, Trevor
• Kaliski, Burton
• Klapper, Andy
• Knudsen, Lars
• Kocher, Paul
• LaMacchia, Brian
• Lenstra, Hendrik W., Jr.
• Mao, Wenbo
• Manasse, Mark
• McCurley, Kevin
• Naor, Moni
• Odlyzko, Andrew
• Ostrovsky, Rafail
• Quisquater, Jean-Jacques
• Rabin, Michael
• Rivest, Ronald L.
• Rogaway, Phil
• Rudich, Steven
• Schiller, Jeff
• Schneier, Bruce
• Sherman, Alan
• Shostack, Adam
• Shoup, Victor
• Stern, Jacques
• Stinson, Doug and his book, Cryptography: Theory and Practice.
• Stubblebine, Stuart
• Tsiounis, Yiannis
• Tygar, Doug
• Vaudenay, Serge
• Wagner, David
• Yee, Bennet

• Encryption/decryption algorithms

  Knudsen's Block Cipher Lounge

  • CAST (Also see this.)
  • RC2: For information about RC2 contact RSA Data Security.
  • RC4: For information about RC4 contact RSA Data Security. Also:
    • Alleged RC4
    • Alleged RC4 test
    • RC4 brute-force search
    • RC4 in 3 lines
• Payment protocols
  • iKP (IBM Zurich) (renamed to SEPP in conjuction with Mastercard).
  • Millicent
  • NetCheque
  • SEPP
  • SET (Secure Electronic Transaction; Visa and Mastercard)
  • SIPS (Cybercash)
  • STT (Microsoft's Secure Transaction Technology)
• ASN.1 Layman's introduction from RSA
• CDSA (Intel's Common Data Security Architecture)
• Cryptolopes (IBM)
• Crypto API (Microsoft)
• MD5 (RFC1321)
• PFX (Microsoft's Personal Effects Exchange)
• PICS
• PCT (Microsoft's Private Communication Technology)
• SHTTP (The Secure HyperText Transfer Protocol Draft RFC)
• SKEME (Hugo Krawczyk, IBM)
• SKey (Bell Canada's implementation)
• S/MIME
• SSL 3.0 SSL 3.0 SSL (Netscape) SSL (Eric Young's implementation) SSL 3.0 internet draft
• S/WAN
• Telescript (General Magic)

Adam Shostack's list

• Sites with many routines or packages available
  • Italian code compilation (Milan University)
  • Wimsey Crypto collection (old)
  • Wimsey Crypto collection (new)
  • Replay (Netherlands)
  • Michael Paul Johnson's collection TrustedWeb (from Siemens/Nixdorf)
  • Tony Patti's home page and Cryptosystems Journal
• Software collections, toolkits, and packages with many different routines
  • Crypto CD
  • COPS (CERT; unix security toolkit)
  • Cryptographic Extensions for Java and Perl (Systemics Software Archive). Also: Cryptix
  • Crypto++ by Wei Dai.
  • JCrypt
  • LiDIA (number-theory package).
  • LInteger (C++ supporting multiple precision integers).
  • SKIP IP layer encryption/key management software (SUN)
• Implementations of individual algorithms or protocols
  • Crack (CERT)
  • Elliptic curve implementations from Hilarie Orman and Rich Schroeppel
  • DES (Eric Young's implementation)
  • HAVAL hash function
  • MD5 (in C, as distributed by RSA DSI)
  • MD5 (in C++, prepared by Mordechai T. Abzug, [email protected])
  • PGP
  • MIT PGP key-server
  • PGPFone
  • RIPEM (Indiana University: Riordan).
  • SATAN (Security Administrator's Tool for Analyzing Networks)
  • SFS (Secure File System for DOS and Windows)
  • SSH (Secure Shell)
  • KeyNote Trust Management System

• Number Theory people and pointers.
• Kevin McCurley's bibliography on computational number theory
• The Prime Page (by Chris Caldwell, University of Tennesee)
• RSA Factoring by Web Project
• RSA Factoring Challenge
• NTL--A Library for Doing Number Theory

• CRAK Software--WordPerfect, etc. crackers
• Beale
• CMU-alex
• Froomkin/Metaphor
• Export-A-CryptoSystem-Sig,
• Key Escrow
• RSA Tee shirts
• Sendmail page from Henry W. Farkas
• Sirene additional pointer
• Jon Rochkind's HTML version of Tim May's `Cyphernomicon'
• Java Security
• Eric Young's SSLeay
• Technical security counter measures
• Transparencies of slides on electronic commerce associated with Kalakota/Whinston book, "Frontiers of Electronic Commerce" (Addison-Wesley)
• Global Network Navigator issue on web security
• Carl Ellison's list of certificate uses
• CAFE
• Digital Silk Road (by Chris Hibbard)
• Clipper III
• Goldberg/Wagner paper on architectural considerations for cryptanalytic hardware
• Mondex Non-Anonymity
• PathServer (finds paths between PGP keys).
• New EAR text...
• e$ Home page