Encryption

Tutorial by SSH Communications Security: "The use of cryptography is no longer a privilege reserved for governments and highly skilled specialists, but is becoming available for everyone to make use of."

Hits: 97
Rate it
Comment on it

"'Hash' functions identify digital content with mathematical certainty - but is that enough to foil the hackers?" Explains how techniques such as MD5 and SHA-1 work. Technology Review, 08/04/04. Requires free registration.

Hits: 53
Rate it
Comment on it

"The PKIX Working Group was established in the Fall of 1995 with the intent of developing Internet standards needed to support an X.509-based PKI. The scope of PKIX work has expanded beyond this initial goal. PKIX not only profiles ITU PKI standards, but also develops new standards apropos to the use of X.509-based PKIs in the Internet.

Hits: 33
Rate it
Comment on it

"Even though cryptography, the art of secret writing, has been known for several thousand years it is getting a lot of press these days in its electronic incarnation. This presentation provides a simple, yet effective, look at the mechanics of cryptography, including encryption software and algorithms, the Data Encryption Standard (DES), 3DES, IP Security (IPSec), Advanced Encryption Standard (AES), Public Key Infrastructure (PKI), Pretty Good Privacy (PGP) and issues and myths surrounding encryption and its application to business." Free registration required. From Webtorials.com

Hits: 199
Rate it
Comment on it

The National Institute of Standards and Technology (NIST) is taking a leadership role in the development of a Federal Public Key Infrastructure that supports digital signatures and other public key-enabled security services. NIST is coordinating with industry and technical groups developing PKI technology to foster interoperability of PKI products and projects. In support of digital signatures, NIST has worked with the Federal PKI Steering Committee to produce digital signature guidance.

Hits: 64
Rate it
Comment on it

This paper "examines the use of Public Key Infrastructure (PKI) in abusiness environment, starting from the current security concerns ofbusinesses and then reviewing the necessary components of informationsecurity. It also delineates the key security services that enable riskmitigation in digital environments, and explains how PKI cohesively "enables the systematic approach to information security that "businesses need." From the PKI Forum. In PDF.

Hits: 118
Rate it
Comment on it

Links and PKI article references.

Hits: 43
Rate it
Comment on it

Vendor group.

Hits: 43
Rate it
Comment on it

"The project aims to develop inter-institutional applications and has been working with a group of Internet2 institutions, along with the University of Wisconsin and the University of California - San Diego. The Dartmouth PKI Lab web site is used to disseminate general information about PKI systems and share the results of our development work."

Hits: 35
Rate it
Comment on it

"This page contains links to various sites and documents which are related to Public Key Infrastructure (PKI) stuff, especially links to all Certification Authorities (CAs) I'm aware of."

Hits: 89
Rate it
Comment on it

"This PKI Note provides general information about PKI policy, the role that policy plays in a PKI and how that policy applies to both traditional and PKI-enabled business environments. It also addresses the documentation required to support a PKI policy, what is specified in a PKI policy, how a PKI policy can be managed, and outlines some high level issues regarding PKI policy." From the PKI Forum.

Hits: 13
Rate it
Comment on it

The PKIX Working Group is the IETF standards group responsible for developing Internet standards needed to support X.509-based public-key infrastructure.

Hits: 29
Rate it
Comment on it

Jamie Lewis, Burton Group CEO and Research Chair writes in this paper: "I'm a strong advocate of the federated security model. Instead of everyone agreeing on one security system, the federated model allows enterprises to use different security mechanisms, such as username/password pairs, Kerberos, or security tokens. Federation standards create a mechanism by which these different systems can exchange security information, without in-depth knowledge of the security services on each side of the agreement."

Hits: 54
Rate it
Comment on it

"Over the past couple of years, steganography has been the source of a lot of discussion, particularly as it was suspected that terrorists connected with the September 11 attacks might have used it for covert communications. While no such connection has been proven, the concern points out the effectiveness of steganography as a means of obscuring data. Indeed, along with encryption, steganography is one of the fundamental ways by which data can be kept confidential. This article will offer a brief introductory discussion of steganography: what it is, how it can be used, and the true implications it can have on information security." SecurityFocus, 04/09/03.

Hits: 46
Rate it
Comment on it