Information Security Links

Standards, Papers, Stuff

• NIST
  • FiPS standards.
  • Endorsed Tools List is a (very short) list of formal spec systems for A1 systems.
• IPv6 (aka IPng) extends IPv4 to incorporate strong security (amoung other things).
• Journal of Cryptology.
• NRL has a publications page that includes crypto-logic stuff mixed in with other stuff. Another site has a good paper on formal verification of protocols using a prover named Isabelle.
• Internet Security Systems, Inc. has an on-line catalog of known security flaws (OS-level stuff).
• The Electronic Privacy Information Center is an excellant source of information related to privacy on the Internet. The laws governing cryptology are in a state of flux. Take a look at the EPIC Wiretapping page and the letter sent to congress.
• The National Cryptologic Museum at Fort Meade.
• The munitions T-shirt and the story behind it.
• The SSL patches for Apache are available for download.

Electronic Commerce

• Notes on internet payment schemes.
• CommerceNet is a consortium of companies interested in Electronic Commerce. This site includes the Nielsen report on Internet demagraphics.
• Lots of essays, related to money, internet economics, etc.
• UCC Article 2B covers digital information including licenses, software contracts, and other agreements to support or modify digital information.

Other Crypto Links Pages

• Ron Rivest has a homepage with lots of good pointers. The fact that Ron Rivest's page is so good is part of the reason that very little effort has been put into maintaining this links page; use his instead ( click here).
• A good all-around crypto-link.
• Links to E-commerce pages.