Crypto and security links

• Basic resources
  • Frequently Asked Question (FAQ) documents
  • Tutorials
  • Crypto and security standards
• Cryptography law and policy
• Cryptography technical information
  • Lists of online cryptography papers
  • Particularly interesting papers
  • Collections of crypto links
• Computer and network security
  • Security links
  • Firewall links
  • Security tools
• Links to home pages

• FreeS/WAN
• The IPSEC Protocols
• Linux resources

• Crypto FAQ
• Firewall FAQ
• A FAQ listing computer security mailing lists
• Secure Unix Programming FAQ

• a basic introduction to cryptography from the keyblitz project
• the concepts section of the GNU Privacy Guard documentation
• Gary Kessler's overview
• Terry Ritter's introduction
• Kurt Seifried's online introductory book
• Peter Gutman's cryptography tutorial (500 slides in PDF format)
• John Savard's historical approach
• Bruce Schneier's self-study cryptanalysis course

• Common Criteria, new international computer and network security standards to replace the "Rainbow" series
• AES Advanced Encryption Standard which will replace DES
• IEEE P-1363 public key standard
• our collection of links for the IPSEC standards
• history of formal evaluation of security policies and implementation

• International survey of crypto law.
• International survey of digital signature law

Organisations opposing crypto restrictions

• RFC 1984, the IAB and IESG Statement on Cryptographic Technology and the Internet.
• The EFF's archives on privacy and export control.
• Global Internet Liberty Campaign
• Center for Democracy and Technology
• Privacy International, who give out Big Brother Awards to snoopy organisations

Other information on crypto policy

• John Young's collection of documents of interest to the cryptography, open government and privacy movements, organized chronologically
• Encryption, Privacy and Security Resource Page with a mainly US focus
• Cryptography Export Control Archive, mainly links to court and govenment documents on various challenges to US law
• A good overview of the issues from Australia.

• Counterpane
• cryptography.com
• Cryptosoft

• Key length requirements for security
• Why Cryptosystems Fail
• Risks of escrowed encryption
• Security pitfalls in cryptography
• Reflections on Trusting Trust, Ken Thompson on Trojan horse design

• Counterpane
• Peter Gutman's links
• Helger Lipmaa's links
• PKI links
• Robert Guerra's links

• COAST Hotlist
• DMOZ open directory project computer security links
• Telstra
• Bennet Yee
• Email Security and PKI Documents
• Open SEC, a link farm full of links to freely available security tools

• COAST firewalls
• Firewalls Resource page
• Firewall info list
• Ami Levartovsky

• VPN Consortium
• First VPN's white paper collection
• oddsites.com VPN links

• COPS Computer Oracle and Password System; tests a system for various weaknesses
• SATAN System Administrators Tool for Analysing Networks
• NMAP Network Mapper
• Internet Traffic Archive, various tools to analyze network traffic, mostly scripts to organise and format tcpdump(8) output for specific purposes
• Wietse Venema's page with various tools
• Crack password cracker
• Tripwire saves message digests of your system files. Re-calculate the digests and compare to saved values to detect any file changes.
• Putty, a free Windows SSH client
• Deception Toolkit, a collection of "honeypot" servers which emulate widely exploited weaknesses while logging the attacks.
• Open CA project to develop a freely distributed Certification Authority for building a open Public Key Infrastructure.
• ISIC, IP stack integrity checker, generates legitmate and bogus packets "to test the stability of an IP Stack and its component stacks (TCP, UDP, ICMP et. al.)"

• Cryptographers
• Cypherpunks
• Computer security folk

• Document index file
• Beginning of this file
• FreeS/WAN home page