CSCI E-170 Reading

Lecture 05: Encryption, Hash Algorithms & Integrity

required reading:

RFCs

• IAB and IESG Statement on Cryptographic Technology and the Internet- IAB & IESG - RFC 1984 (1996)
• Attacks on Cryptographic Hashes in Internet Protocols - Hoffman & Scheier - RFC 4270 (2005)
• Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile - Cooper et al, RFC 5280 (2008) - Sections 1, 2, 3 & 8
• Randomness Requirements for Security - Eastlake, Schiller & Crocker RFC 4086 (2005) - Sections 1, 2 & 8

Other documents

• Microsoft, VeriSign, and Certificate Revocation - Guerin - (2001)
• Why Cryptography Is Harder Than It Looks - Schneier (1997)
• Did NSA Put a Secret Backdoor in New Encryption Standard? - Schneier (2007)

optional reading:

Documents that may be of interest

• The Data Encryption Standard (DES) and its strength against attacks - Coppersmith (1994)
• Advanced Encryption Standard (AES) - NIST (2001)
• Cryptographic Toolkit - NIST
• The Clipper Chip - EPIC
• The Clipper Chip - A Technical Summary - Denning (1993)