| Javascript Feeds RSS Feed Security Dashboard | SearchSecurity.com |
|
IPSec
|
|
SSH
|
|
SSL
|
|
Steganography
|
|
VPN
|
|
Diffie-Hellman Key Exchange - A Non-Mathematician's Explanation A colleague recently asked if I could help him understand the Diffie-Hellman key exchange protocol? without digging through the math. My answer was "Yes I can, but not easily." Doing so requires a few diagrams because, in this particular case, a picture is worth at least a thousand words!
Keith Palmgren,
02/02/2005
|
|
Communications Security for the Twenty-first Century: The Advanced Encryption Standard In August 1999 NIST announced the five finalists: MARS, RC6, Rijndael, Serpent, and Twofish. These were widely accepted-along with some support for E2-as the "best" submissions, and NSA called these "appropriate choices," reported NIST. But there was also concern that the first year of public evaluation had concentrated on picking off the easy targets and that the remaining evaluation period was insufficient for a full evaluation of the finalists. The winner(s) will be determined in summer 2000.
By Susan Landau, 04/22/2004
|
|
The Relevance of Quantum Cryptography in Modern Cryptographic Systems This paper explains the basic principles of quantum cryptography and how these principles apply to quantum key distribution. One specific quantum key distribution protocol called BB84 is described in detail and compared to traditional (nonquantum) cryptographic systems. It is explained how BB84 addresses some of the shortcomings of traditional cryptographic systems. The remaining technical limitations of BB84 are listed. A short overview of commercial implementations of quantum cryptography is given. The paper concludes with a brief discussion of the relevance and future viability of quantum cryptography in today's information security environment.
By Christoph Guenther, 04/18/2004
|
|
Digital Signature and Multiple Signature: Different Cases for Different Purposes Like paper-based signatures, digital signatures intend to respect a number of security assumptions. Methods of digital signature apposed by a single user have been defined and are widely used. But is it sufficient? What if a legal document requires witnesses and notarization, or a contract needs the signatures of several officers? This paper will first show the basics to understand digital signatures and how the security properties of integrity, authentication, and non-repudiation are respected. We will then present the purposes of multiple signature schemes and introduce a possible classification of cases that need multiple signatures. This paper is not intended as a presentation of a particular multiple signature scheme, but the classification presented should help researchers identify more appropriate new multiple signature schemes.
By Chafic Maroun Rouhana Moussa, 04/14/2004
|
|
One Fish, Twofish, Red Fish, Blowfish A History of Cryptography and it's Application in Society On the sixth day, God created living creatures of every kind; and on the seventh day he rested. Arguably millions of years later, approximately 2000 BC, cryptography was created; though not directly by God, but by ancient Egyptians writing hyroclifics on the walls of kings tombs. As times progressed, new applications were found and the art of enciphering messages evolved. From Greeks to Spartans to Julius Caesar employing character substitution, cryptography has continued to develop from an art of hiding messages in a secret language to the level of mathematical complexity it is today.
By Joseph Kasten, 04/05/2004
|
|
The Day DES Died How was DES broken? How do you know what cryptosystems work? Which ones are best? This paper won't answer all those questions, but it will take a closer look at DES. The characteristics of the RSA challenges will be discussed. Finally, we'll compare DES to other cryptosystems to discover which ones are secure and why. Understanding more about this long-term standard encryption algorithm may help to secure implementations of cryptography in your environment. I hope that you'll find this paper interesting and a little fun too!
By Paul Van De Zande, 04/05/2004
|
|
PGP: A Hybrid Solution Cryptography is the science of keeping data secure. Encryption is the process of using cryptography to encode data so that it's meaning is not immediately obvious. There are two main types of cryptography that are used, symmetric and asymmetric. It is also possible to use a hybrid of the two; Pretty Good Privacy (PGP) by Network Associates is an example of this. Symmetric and asymmetric cryptography both have advantages and disadvantages that will be discussed in this paper. PGP brings the best of each together and also works to minimize the disadvantages. This will also be discussed. Alice and Bob are often used as examples when cryptography is explained, therefore I will also use them for most examples.
By Jessica J. Benz, 04/05/2004
|
|
Quantum Cryptography: Is your data safe even when somebody looks? In order to understand how and why quantum cryptographic key exchange works, it is useful to understand a little bit of quantum mechanics. You can skip this section if you like and take my word for what the results are - but if you were a trusting person you wouldn't be reading a paper on cryptography would you? Besides, quantum cryptography can be thought of as a special case (probably the most simple case) of the broader topic of quantum computing. As such, understanding the properties of quantum mechanics that make quantum cryptography possible and useful will provide a basis for understanding more complex quantum phenomena (if this introduction should pique your interest in this area).
By Tom Klitsner, 04/05/2004
|
|
Quantum Encryption vs Quantum Computing: Will the Defense or Offense Dominate? Quantum encryption will soon provide unbreakable ciphers. Quantum computers will soon allow the cracking of every cipher. Does something sound contradictory about those statements? The fact is we have a bit of a dichotomy here, and with teams on both sides of the argument fervently pushing their contradictory visions it can be hard for computer security professionals to separate the fact from the hype. But that is what we are paid to do, and we have an obvious stake in how these technologies will change the future. This paper examines these topics by providing a snapshot of current research. We should start, however, with a short review of encryption today.
By Bob Gourley, 04/05/2004
|
|
Who's Who in AES? The main goal in designing any encryption algorithm is security. There are several encryption methods in use today using various algorithms depending on the information being protected. Some are used to protect unclassified but sensitive data and other secret algorithms are used to protect the most highly classified data. This paper is going to introduce the new Advanced Encryption Standard, or AES, the winning algorithm, its competitors, the specifications set forth, and decision making process of NIST.
By Kyle Jones, 04/05/2004
|
|
Page: 1 2 345678 |