Cryptographic Sources/Libraries

• BLOWFISH: free implementation of the fast and (secure ?) symetric block cipher
• DES3 (CryptoSoft) Portable, ultrafast DES3 development kit !
• FreeLIP (freelip_1.0.tar.gz) is the large integer package used in the global collaboration to factor the 129-digit number RSA-129 and thereby solve a 17-year old challenge in cryptography.
• ICE: Design criteria and reference implementation of the ICE block cipher.
• Internet Locations for Materials on the Disks for Bruce Schneier's Applied Cryptography
• Microsoft's CryptoAPI
• OSISEC v2.3 (requires IC-RI) and its readme
  Applications: X.500 ( QUIPU with dish or de), PEM ( XPEM, PEM filter utility, PEM integration into mh), ODA (DOCSEC).
• Python Cryptographic Toolkit A cryptographic toolkit for the Python programming language. Includes hash, functions (Haval, MD2, MD4, MD5, SHA), private-key encryption (Blowfish, DES, DES3, Diamond, IDEA, RC4, 32-bit RC5, RedocIII), and public-key encryption (DSS, ElGamal, RSA).
• RSA DSI's BSAFE 2.1 (RSAREF): RSA, DES, Triple-DES, Diffie-Hellman, RC2, RC4, secret sharing, PEM, PKCS, X.509; US commercial
• RSA DSI's BSAFE 3.0, in particular a benchmark
• RSAEURO ( i.e., a European version of RSA's RSAREF), FTP at ftp://ftp.dsi.unimi.it/pub/security/crypt/code and ftp://ftp.ox.ac.uk/pub/crypto/misc. For more details contact Stephen Kapp, at 'rsaeuro@sourcery.demon.co.uk'.
• SECLAB, DSV, Stockholm University
  See also: Sead Muftic "CISS: Generalized Security Libraries", Comput. & Security J. Vol 11 No 7, 1992
• SECUDE(GMD Darmstadt)
  Applications: X.500 (QUIPU with dish, secure de) PEM (PEM library functions, PEM filter utility, PEM integration into mh, xmh, elm)
• SOCKS is a generic socket library used by some firewall implementations
• SSLeay and SSLapps, free implementation of Netscape's Secure Socket Layer - the software encryption protocol behind the Netsite Secure Server and the Netscape Browser.
• Univ. of Milano's "large collection of crypto stuff" (Mirror@Hildesheim)
• Wai Dai's Crypto++ Library
  is a portable C++ library which supports MD5, SHS, DES, IDEA, WAKE, RC4, RC5, Blowfish, Diamond, Diamond Lite, Sapphire, Luby-Rackoff, MDC, Diffie-Hellman, RSA, DSA, ElGamal, BBS, Shamir's secret sharing scheme, and Rabin's information dispersal scheme. It is also available at ftp.hacktic.nl:/pub/replay/pub/crypto/LIBS/cryptolib/crypto11.zip.
• Worldwide Survey Of Cryptographic Products (Trusted Information Systems)
• XOpen's Crypto API (Draft 6 available)

Cryptographic Programs

• File Encryption
  • CS Enigma
    An ultrafast and powerful file encryption program for Windows 95/98/NT. Supports DES3, Cast5, Blowfish, Serpent, Twofish and Safer+ encryption, output to selfextracting executables, wipe functionality, and easy key management.
  • Pretty Good Privacy (PGP)
    Email -and file encryption program that also supports digital signatures. It uses IDEA for the file/mail encryption and the RSA protocol for key exchange. Actual informations about the product can also be found on Phil Zimmermann's company site at PGP Inc .
• Disk/Filesystem Encryption
  • Secure File System (SFS)
    SFS is a set of programs which create and manage a number of encrypted disk volumes, and runs under both DOS and Windows. Supports several strong encryption algorithm's and usage of smart cards.
  • SecureDrive
    SecureDrive is a DOS TSR program which allows you to create up to four encrypted partitions on your hard drives. Encryption is performed at the disk sector level and is completely transparent to the application program. Uses IDEA encryption in CFB mode and works with DOS and Windows. Several poeple have been reported its (restricted) usage with Windows 95.
• E-Mail Encryption
  • PGPmail 4.5
    Commercial product that integrates (plug-ins) encryption, sign and verify functionality into Qualcomm's Eudora 3.0 email client software and into Netscape Mail. It's available for Windows 95 and Windows NT 4.0 only.
• Voice Encryption
  • Nautilus 1.5
    A encryption program that lets you have encrypted voice telephone conversation. Supports DES3, Blowfish, or IDEA encryption. Works with DOS, Linux, and Solaris. Some versions are available at ftp.funet.fi:/pub/crypt/utilities/phone
  • PGPfone 1.0
    A software package that turns your desktop or notebook computer into a secure telephone. Secure voice calls are supported over the Internet, or through a direct modem-to-modem connection, or even over AplleTalk networks. It works with MAC OS, Windows 95 or NT. A commercial version for the Macintosh is available at PGP Inc.
• Secure Communication and Authentication
• Steganography
• CryptoAnalysis

Secure Systems/Firewalls, SmartCards

• A selected bibliography on electronic purses
• Atlantic Systems Group - TurnStyle Firewall
• BDM's CyberShield System based on Data General's B2 UNIX - a complete turnkey and fully B2 conform Internet firewall solution
• Border Network Technologies, Inc. - BorderWare Firewall
• CheckPoint Software Technologies - FireWall-1
• Card Europe
• Digital Equipment Corporation - AltaVista Firewall
• Fault based analysis of crypto systems: symmetric systems and asymmetric systems
• Global Technologies Associates - GFX Internet Firewall System
• Harris Computer Systems Corporation - CyberGuard Firewall
• IBM - Secured Network Gateway
• Livermore Software Laboratories - Portus
• Milkyway Networks, Inc. - Black Hole
• NEC - PrivateNet
• ON Technology Corporation - ON Guard
• Project CASCADE
• Radguard, Ltd. - CryptoSystem
• Raptor Systems, Inc. - Eagle
• PC/SC Workgroup: Interoperability Specification for ICCs and Personal Computer Systems
• Some background on tamper resistance (M. Kuhn)
• Sun Microsystems - SunScreen SPF-100
• Smartcard Forum (and their metaindex)
• Technologic, Inc. - Interceptor
• Trusted Information Systems - Gauntlet Internet Firewall System

Steganography

• Steganography Info and Archive
• The Steganography Link Farm
• Steganographie als Verschluesselungstechnik (Koehntopp)
• Stego InfoPage
• Directory of /pub/security/crypt/steganography
• Steganography at www.thur.de/ulf
• Pointers to Steganographic Software

Alert Sites

• Virtual Library of Computer Security Breaches
• NIST's Computer Security Clearing House
• NASIRC - NASA Automated Systems Incident Response Capability
• CERT - Computer Emergency Response Team (ftp)
• DFN-CERT and their FTP Archive
• ASSIST - Automated Systems Security Incident Support Team
• DDN - DEFENSE DATA NETWORK
• CIAC - Computer Incident Advisory Capability
• FIRST - Forum of Incident Response and Security Teams (ftp)
• AUSERT - Australian Security Emergency Response Team (ftp)

Collections of Pointers

Virtual Libraries

• Virtual Library of Computer Security Breaches
• Stanford's Yahoo: Security and Encryption
• Virtual Library: Cryptography, PGP, and Your Privacy
• EINet Galaxy: Security Links

Individual Collections

• Telecom Australia's Computer and Network Security Reference Index
• CNS (more a dictionary than a collection of pointers)
• Brian Comb's/Quadralay's Crypto Archive
• Cypherpunks: Hughes (hughes@soda.berkeley.edu), Matt Thomlinson (phantom@u.washington.edu), Vince Cates (vac@cs.cmu.edu)
• EISS Karlsruhe
• Bob Flower
• Bruce Schneier
• Peter Gutmann
• Paul Kocher
• Peter Lipp and Vessna Hassler
• Mukund Mohan's Cryptography Page
• Ron Rivest's page on Cryptography and Security
• Mike Scher's page on Network/Computer Security Technology
• Gene Spafford's Hotlist: Computer Security, Law and Privacy
• Bennet S. Yee's Security Related Net-pointers
• Tatu Ylöne's International Cryptography Pages
• Tony S. Patti's Cryptosystems Journal
• W3C's Security Resource Page

Notes, Books, Journals, and Publications

• ACM Transactions on Information and System Security
• Charles Blair's Notes on Cryptography
  Covers Number theory, Public-Key encryption, RNG's ...
• Cryptologia
  A quaterly journal devoted to all aspects of cryptology
• Cryptosystems Journal
• Handbook of Applied Cryptography
• IEEE Computer Security and Privacy
  IEEE Computer Society press online catalogue, security and privacy section
• Information Security News
• JIBC - Journal of Internet Banking and Commerce
• Lawries Cryptography Bibliography
• NIST Computer Science Laboratory bulletins
• Phrack Magazine
• Security Protocol Workshop
  Preprints of papers from the '97 workshop
• USENIX Conference Proceedings
  Includes material from Usenix security conferences and symposiums

Miscellaneous

• Virtual Library of Computer Security Breaches
• Home Pages of some Cryptographers
• Calendars of security events: Tezcat and National Security Institute's Security Resource Net
• Secure Telnet
• RISKNet World Wide Web Server
• Christopher L. Menegay's Security page This site contains explicit information about how to break into Unix systems. It also details how to stop these methods. A valuable service. Knowing this information is out there helps administrators.
• Unix Security This section of the Advanced Laboratory Workstation Project contains a lot of information on security, including access to governmental bulletins.
• Greatcircle FTP Server (firewalls) This is the system the firewalls mailing list lives on, and contains an extensive list of documentation and other useful information about firewalls.
• Computer Systems Consulting
• Internet Security FAQ
• Univ. of Milano, IT-CERT (Mirror@Hildesheim)

• Security bugs in Java (by David Hopwood)
• CERT FTP Server: Computer Emergency Response Center FTP site. Many advisories and tools are available here.
• CIAC FTP Server
• DDN Security Bulletins FTP Server: This is the NIC's security ftp server. Skip all the files starting with ddn-security- until you get down to ddn-security-8901. All the previous ones will just tell you that the naming conventions have changed, and you're looking at the wrong file.

• Dartmouth Security Tools Matt Bishop's cool collection of papers and programs related to security, including passwd+.
• Purdue COAST Project Computer Operations, Audit and Security Tools. A great ftp site collecting many things pertinant to security. at also has a FTP Archive
• MIT Athena FTP Server From MIT, the Athena Project has more to offer than X. Among other things, you'll find kerberos software here, as well as a great collection of USENIX papers, and other tasty tidbits.
• Texas AMU security tools Texas A&M, in response to being broken into, has developed a lot of expertise in detecting and preventing breakins. Here you'll find papers and tools.
• COAST Security Archive
• All IACR Conferences Author Index -- Or Who Is/Was Active In The Crypto Community
• Sicherheit in der Informationsgesellschaft
  

CryptoSoft GmbH
Fon/Fax: +49 30 7468 2840

Feedback: webmaster@cryptosoft.com
Copyright ©1995-2001 Cryptosoft GmbH
All Rights Reserved