links.security

Link Farms

• Bellare - Crypto links
• More link farms, conferences, organizations, electronic commerce, IETF, key forfeiture, crypto people.
• Internet2 Security Working Group
• Extensive collection of links to academic, industry, and other security oriented pages.
• Anonymity, privacy, security.
• Very nicely done collection of links to anonymity, privacy, and security resources.
• Bellare - Crypto links
• More link farms, conferences, organizations, electronic commerce, IETF, key forfeiture, crypto people.
• Cambridge Computer Security Group Links
• Huge collections of links to security-related sites - the format is a bit like this list.
• Comprehensive list of Public Key Infrastructure (PKI) links
• Links to PKI documents, specifications, CA's, and sites with PKI-related useful information.
• Coast Security Archive - Category Index
• A large archive of security software, publications, and technical information.
• COAST Hotlist Contents
• Gene Spaffords crypto and security link farm.
• Cryptography
• PGP, encryption algorithms, legal issues.
• Cryptography URL
• Encryption standards, FAQ's, and FTP sites.
• DSTC Security Related Links
• Links to crypto, digital signatures, e-cash, internet backing, smart cards, NT security, PKI, standards.
• Email security, cryptography and related stuff
• PEM, MIME, and MOSS RFCs, links to CA's, implementations, literature, PGP.
• European Cryptography Resources
• Recommendations, drafts, papers, new items, official bodies, research, and government meddling.
• Firewall Security Jump Page
• Links and summaries of a wide variety of firewall products.
• Gateway to Information Security Home Page
• Links to a large number of security-related sites, books, journals, and related information (imagine this page, but not all lumped together on one page).
• Home-Page of Markus Hübner
• Security, cryptography, hacking, business on the Internet, security software, satellite hacking.
• International Cryptographic Software Pages for Encryption, Decryption, Cryptanalysis, Steganography, and Related Methods
• Algorithms, software packages, protocols and standards, books, journals, conferences, newsgroups, mailing lists, crypto links.
• Links Related to Terrorism, Intelligence, and Crime
• A large number of intelligence, security, law enforcement, disaster planning, terrorism, crime, military, and defense agencies and organizations.
• Luca Venuti's Home Page - TPC
• Electronic privacy links, organisations, newsgroups.
• No Big Brother Page
• Links to remailers, anon proxies, crypto and stego software, file wiping tools, privacy and anti-privacy organisations.
• NCSA Hot Links
• Anti-virus software, firewalls, general security vendors, general infosec links, parental control, privacy, law, and ethics.
• Neil's Security and Privacy Resources
• Encryption, steganography, special events, research, documents, news, security archives, security organizations.
• Network/Computer Security Technology
• Current events, security web pages, commercial security tools, newsgroups, mailing lists, FAQ's, incident bulletins, conferences/seminars/workshops.
• PGP Resources
• Resources related to PGP such as mailer add-ons and front-ends, key servers, and related information.
• PGP-Users Mailing List Home Page
• PGP-related information, remailers, privacy information, security and crypto links.
• Spanish Crypto Resources
• Spanish crypto and security-related companies, magazines, and events.
• Steganography
• Stego papers, references, research groups, related resources.
• Strong Cryptography Links on the Internet
• Links to crypto companies, universities, newsgroups, books, algorithms, security and crypto tools.
• Technical Information - Cryptography
• Links to other crypto sites, source code archives, companies and organisations, peope, and reference information.
• The Rotherwick Firewall Resource - Point of Attack
• Firewall basics, white papers, products, manufacturers, books, papers, training, mailing lists, links to other firewall-related resources.
• Tom Dunigan's Security page
• PGP, S/Key, Kerberos, crypto API's, secure applications, commercial providers, government agencies, intrusion detection, vulnerabilities.
• TSA (Law Enforcement and Intelligence) Links
• More links to law enforcement and intelligence agencies.
• Uni-GH Siegen - Security-Server
• Encryption algorithms, data protection, steganography, ecash, Internet security, viruses, conferences, security standards, newsgroups and mailing lists, RFC, journals.
• University of Torino Security Resources
• Links to web pages, newsgroups, FTP sites, research labs, papers, conferences, and journals.
• Vince Cate's Cryptorebel/Cypherpunk Page
• Cypherpunks resources, remailers, digital cash, PGP, and Clipper.
• Vinnie's Crypto Links
• Crypto overviews and FAQ's, link farms, encrypted comms, e-commerce, crypto libraries.

FTP Archives

• FUNET crypto archive
• PGP, symmetric and asymmetric encryption, crypto libraries, papers.
• North American Cryptography Archives
• Archive of crypto software, only available from the US and Canada.
• Oxford Uni crypto archives
• DES, SSL, cryptanalysis, documentation, PGP, miscellaneous.
• Replay crypto/security archives
• Apache, Applied Crypto files, encryption, Java, PGP, remailers, security, voice encryption files.
• Tattooman Crypto Archive
• Large selection of crypto software, but trapped behind the iron curtain.
• University of Hamburg crypto archive
• Disk and file encryption, PGP, stego, voice encryption.
• University of Oslo PGP archive
• PGP and PGP-related software.
• UREC archive
• French archive of CERT bulletins, dictionaries, PC, Unix, VMS security software (mostly anti-virus and access control rather than crypto).

Social Issues

• FUNET crypto archive
• PGP, symmetric and asymmetric encryption, crypto libraries, papers.
• [1997] 1 Web JCLI
• Analysis of the UK governments policy on encryption.
• Additional Comments of Philip R. Karn, Jr.
• Phil Karn rebuts inaccurate and bizarre government claims in congressional testimony (this is an example of the kind of misinformation which government advisors often provide to their governments).
• Adopt An MP - Homepage
• UK campaign to adopt an MP and enlighten them over problems with crypto restrictions.
• Americans for Computer Privacy
• Computer privacy issues.
• BBC News - Encryption
• BBC news stories on encryption, including "UK Government dithers on encryption regulation".
• Big Brother Incorporated
• Companies which supply surveillance technology to non-democratic regimes.
• Brookings Policy Brief No.21.
• Brookings Institute study of crypto policy (pro-GAK).
• C to English and English to C translator
• Translates crypto code into English to allow it to be exported, then translates it back into code afterwards.
• CACIB
• UK government tactics for deploying GAK.
• Canada's export controls
• Summary of the Canadian crypto export situation.
• Cato Handbook for Congress: Freedom on the Internet and Other Computer Networks
• Cato Institute study of crypto policy (anti-GAK).
• Centre for Democracy and Technology Crypto Page
• CDT information on current US crypto policy
• CIPHR'99 Conference: Cryptography & International Protection of Human Rights
• Conference on crypto and human rights.
• Clipper Roadshow
• US government policy laundering on key escrow.
• CNET features - digital life - privacy in the digital age
• Digital privacy (or more specifically, the lack thereof).
• Codex Surveillance & Privacy Page
• Surveillance, stalking, privacy invasion, eavesdropping, and anything else related to these categories.
• Comments on Encryption Transfers
• Comments on new US export regulations.
• Comments on Encryption Transfers - HTML
• Easier-to-handle HTML versions of the above.
• Crime, Terror & War: National Security & Public Safety in the Information Age
• The sky is falling! The sky is falling!
• Crypto AG
• Reports of Crypto AG rigging crypto hardware to allow NSA decryption.
• Crypto AG - Der Spiegel (German)
• Allegations of intelligence agencies subverting Crypto AG product security.
• Crypto-Controls Advisory Services
• The one organisation making money out of US export controls.
• Crypto Law Survey
• A survey of crypto laws in various countries.
• Crypto regulation in Europe
• The state of crypto regulation plans in Europe as of May 1997.
• Cryptography's Role in Securing the Information Society
• National Academy of Sciences report on cryptography policy.
• Cyberspace Law for Non-Lawyers
• Privacy laws and the Internet.
• DIE ZEIT Nr. 28/1998 Leichtes Spiel
• German news report on NSA industrial espionage leading to $100M loss for German company.
• DIE ZEIT Nr. 39 vom 17. 9. 1998: Hintertür für Spione
• Another report on Enercon industrial espionage.
• Distributing encryption software by the Internet: loopholes in Australian export controls
• Examination of legal implications of electronic export from Australia. Conclusion: It's OK.
• DTI/UK Encryption Policy
• Reply to the DTI Consultation Paper on Licensing of Trusted Third Parties for the Provision of Encryption Services.
• E-commerce under threat from encryption deal
• The Australian Financial Review on Wassenaar'98.
• Echelon: Exposing the Global Surveillance System
• Covert Action Quarterly article on wordlwide NSA surveillance.
• ECHELON: America's Secret Global Surveillance Network
• Free Congress Foundation report on Echelon surveillance system.
• EE Times - White Paper
• White paper on hackers.
• Emerging Japanese Encryption Policy
• How Japan, Inc, handles encryption policy (a real contrast to the US governments attitude).
• Encryption Policy and Market Trends
• Dorothy Dennings 1997 GAK forecast.
• Encryption Policy for the 21st Century
• Cato Institute study on the future of encryption.
• EPIC Cryptography Policy
• EPIC information on current US crypto policy.
• EPIC Privacy Links
• EPIC privacy resources.
• export-a-crypto-system sig
• Diminuitive crypto hacks (well-known algorithms in a few lines of Perl, Python, or C) and how to use them to poke fun at export laws.
• Export Licensing of Intangibles
• Commentary on likely effects of UK proposal to license export of intangibles.
• Exposing the Global Surveillance System
• Extracts from Nicky Hager's book "Secret Power".
• FinCen
• Big Brother for financial information.
• Former Secrets
• Declassified US government machinations to ban/restrict crypto.
• FUD! Home Page - Crypto legislation
• Contents of and discussion over various US crypto bills.
• GILC -- Cryptography and Liberty
• Survey of encryption policy worldwide.
• GNN on Crypto
• Global Network Navigator web review: The NSA vs The Net.
• Government, Cryptography, and the Right to Privacy
• Paper documenting the overt and covert regulation and restriction of cryptography by governments.
• Good Privacy Test Sites
• Links to sites which show how easy it is to get information on your and your activities on the net.
• GR Design Principles
• GAK-resistant crypto protocol design guidelines.
• Gray Areas Magazine
• Essays and articles on the computer underground (and all sorts of other things).
• Green light for limited encryption exports
• Australia's interpretation of Wassenaar'98.
• IFIP TC11 Position on Cryptopolicies
• IFIP's (very sensible) position on crypto use and crypto regulation.
• Information About PGP & Encryption
• Information on the creeping takeover of GAK.
• Interception
• Technical details on large-scale GSM and ISDN interception techniques.
• Internet Privacy Coalition
• Attempts to ensure privacy on the internet.
• Interview with David Herson - SOGIS
• Interview on European crypto policy.
• ITAR Civil Disobedience
• Click on this form to become an international arms trafficker.
• Key Recovery Study
• The risks of key recovery, key escrow, and trusted third party encryption.
• KRISIS Home Page
• GAK/EuroClipper home page.
• NSA and Crypto-politics
• Huge (1/2MB) writeup on the NSA and crypto politics.
• NSA's Influence on New Zealand Crypto Policy
• NSA influence on New Zealand export policy.
• No Chance for Key Recovery
• Paper on key recovery (GAK) vs human and political rights.
• PGP 6.0: Cat out of the bag
• Wired article showing just how effective US export controls really are.
• Phone Tapping
• Information and resources on government phone tapping plans.
• Privacy, Inc.
• Various resources related to the (lack of) privacy, including access to databases and online information search facilities.
• Privacy International Home Page
• Privacy reports, interntional agreements on privacy and human rights, surveillance technologies, ID cards, privacy-related conferences.
• Privacy on the Internet
• Zola Times articles on Internet privacy.
• Privacy on the Net: Practical Issues
• Links and information on various privacy-related issues (cryptography, anonymity, secure communications).
• q/depesche
• Free crypto campaign logos.
• Remailer list
• List of anonymous remailers.
• Roger Clarke's Privacy Page
• Data surveillance and information privacy information publications, and legislation.
• Roger Clarke's Public Interests on the Electronic Frontier
• Paper discussing various freedoms and rights such as the right to privacy.
• Roxen's General Export Application for Strong 128-bit Encrypted Denied
• Swedish government refusal of export permit for 128-bit SSL.
• RSA as a MIDI file
• RSA encoded as a MIDI file. Technically this is a program and therefore unexportable from the US.
• Self Incrimination and Cryptographic Keys
• Richmond Journal of Law and Technology article on forced disclosure of crypto keys.
• Services Available from Offshore Information Services Ltd.
• Offshore internet services and accounts in Anguilla.
• SOFTWAR Information Security
• Declassified papers and resources on Clipper and key escrow, voice and mail encryption software.
• Tapping into CALEA
• Government surveillance server ("delivers intercepted call content and identifying information... capacity for up to 512 simulatneous call intercepts".
• Telekommunikationsgesetz
• East German surveillance state-style laws being applied in the unified Germany.
• Telepolis Enfopol-Papiere
• Documentation relating to EU telecoms surveillance plans (EU-Echelon).
• The Age - Computers
• DSD meddling in Australian crypto exports.
• Threat and Vulnerability Model for Key Recovery
• NSA report on why GAK is bad (yes, you read that right).
• Tools For Privacy: Version 1
• An online book covering threats to privacy, cryptography, PGP, and related issues.
• TruePosition Wireless Location System Home Page
• Cellular phone tracking.
• UK Cryptographic Policy Discussion Group
• ukcrypto mailing list archives.
• Updated UK Proposals for Licensing Encryption Services
• Critique of UK crypto licensing/GAK proposal.
• U.S. Electronic Espionage: A Memoir
• First exposure of the NSA and Echelon
• US Spy Agency Confirms Secret Princess Diana Files
• Echelon in action: APB story on NSA building up 1000+ page file on Princess Diana.
• Walsh Report
• Report on Australian crypto policy, originally suppressed by the government, then released in censored form after a judicial review, finally obtained as the full version by EFA. Provides most interesting reading since the bits they didn't want the public to see are now highlighted in red.
• What your Browser is Sending
• See what information your web browser is sending to remote servers.

Software

• Advanced Cryptography Tool
• Crypto tool using PGP 2.6.3i with triple DES and SHA-1.
• AES Algorithm Efficiency
• Free-world implementations of the AES algorithms.
• Alex Encryption
• Encryption based on automata theory (unknown security level).
• Ambient Empire
• Vigenere cipher cracker, Windows port scanner.
• Apache HTTP Server Project
• Apache secure web server.
• BSAFEeay, a public domain implementation of the BSAFE API
• BSAFE API wrapper around SSLeay.
• Canadian Cryptographic/cryptanalytic software
• Canadian encryption software and companies.
• CAP
• Cryptographic analysis program (automatically analyse and break simple ciphers).
• Cedomir Igaly's SSH Page
• Free SSH for Windows.
• Cédric Gourio's Java-SSH
• SSH client in Java.
• CIPE
• Crypto IP encapsulation - encrypting IP routers using Linux.
• CipherClerk
• Software emulation of various historical ciphers
• Cisco Systems ISAKMP Distribution
• A reference implementation of the IETF's ISAKMP protocol.
• CRASHME: Random input testing.
• Tests resistance of programs to random input.
• Crowds Home Page
• Anonymous proxying for web browsing.
• cryptix
• Cryptix Java crypto library.
• cryptlib Information
• Encryption library supporting a large number of encryption algorithms, digital signatures, key exctange, key certificates, CA functionality, key databases, smart cards, and secure enveloping.
• Crypto Kong
• PGP-like program using elliptic curve crypto.
• Cryptographic Libraries: A comparison
• Comparison of various free (and free-world) crypto libraries.
• Cryptographic software
• Elliptic curve and RSA public-key encryption software.
• Cryptographic tools for Visual Basic
• Elliptic curve OLE extension for VB.
• Cryptography Blowfish Multi-thread
• Command-line Blowfish encrypter.
• Cryptonite Java Package
• Java crypto library.
• Cryptoscan
• Scanned US crypto publications available outside the US.
• CTC - PGP-compatible encryption software
• PGP-compatible C library and Mac application.
• Delphi crypto software
• Various pieces of crypto software written in, and for, Delphi.
• DES in VHDL
• DES in VHDL, including a Xilinx-optimised version.
• Disk/File Wiping Utilities
• Programs to wipe files, free disk space, slack space, the Windows swap file.
• Emacs Cryptographic Library and Tools
• DES, RC4, IDEA, SHA-1, MD5, and others, in elisp.
• Enabling Network Security with SSLeay
• Security projects based on SSLeay.
• Encrypted PDFs
• Code to work with encrypted PDF's (intended mainly for use with Ghostscript).
• Engineering Research Home Page
• P1363 ECC implementation.
• Enigma
• PGP-compatible plugin written in Java.
• Error Correcting Codes (ECC) Home Page
• C source code and information on ECC's (the techniques employed are closely related to encryption techniques).
• ESP Reference
• Encrypted socket protocol (an open protocol for TCP/IP secure transmissions).
• FastCAST's Homepage
• P5-optimised code for CAST-128/CAST5.
• Fortify for Netscape
• Free 128-bit SSL browser proxy,
• Frank O'Dwyer's Homepage - Security Code
• DES in Java, C++ firewall class library.
• Fresh Free FiSSH!
• Free SSH client for Win'95 and NT.
• Fuzzy Logic: Cryptography
• The GNU encryption project.
• G10 - A Free PGP Replacement
• GPL'd PGP clone.
• GInt
• Bignum library and sample PKC code.
• GMD Security Technology - SecuDE
• Security toolkit for RSA, DSA, DES, DH, X.509, PKCS, PEM, X.500, and BYOG.
• Hamradio page of Thomas M. Sailer, HB9JNX
• All sorts of neat stuff for software decoding of various radio signals.
• Heimdal
• Non-US Kerberos 5 implementation.
• IAIK - Javasecurity Homepage
• Java cryptography extensions from the free world.
• ICE Home Page
• The Information Concealment Engine block cipher.
• Immunix: Adaptive System Survivability
• Automatic protection against stack-smashing attacks.
• International PGP Home Page
• How to get PGP, documentation, foreign-language support, PGP-related products and services, and other PGP resources.
• Internet Locations for Materials on the Disks for Applied Cryptography
• Site #1.
• IRDU PGP Page
• PGP information, software, key management, key server interface, PGP links.
• JCSI
• Free-world JCE implementation.
• JGSS Package Distribution Page
• Kerberos in Java.
• jSSL - A free Java SSL implementation.
• SSL implementation in Java.
• Keytrap Home Page
• Dcyphers keyboard sniffer.
• kha0S Linux - b/c friends don't let friends s[ug]id
• Linux with strong crypto built in.
• Lance Cottrell Home Page
• Mixmaster remailer publications and soure code.
• Linux-PAM
• Pluggable authentication modules for Linux.
• libch's Homepage
• P5-optimised code for various hash algorithms.
• LiDIA - Main Page
• C++ computational number theory library (great for crypto).
• LInteger
• C++ bignum library.
• Linux FreeS/WAN Project
• IPSEC, ISAKMP/Oakley and DNSSEC software for Linux.
• Linux Packet Sniffer
• IP packet sniffer for Linux.
• MD5 Message Digest algorithm in Javascript
• Microsoft CryptoAPI
• Microsoft's attempt at a cryptograhpy API. This page moves a lot, you may need to try a search from MS's developer pages.
• MindTerm - A java implementation of SSH
• SSH client in Java.
• Ming-Ching Tiew Home Page
• PGP key manager, PGP netscape plugin, Motif and Win32 file encrypter using cryptlib, cryptlib Java wrappers.
• Mozilla Crypto Group
• Putting the crypto back into Netscape/Mozilla.
• Nautilus Homepage
• Speech encryption (with a neat anti-Clipper graphic).
• NiftyTelnet
• SSH client for the Mac.
• Nmap -- Stealth Port Scanner
• Stealth scanner using TCP half open scanning, TCP FIN/Xmas/NULL stealth scanning, ftp bounce and IP fragmentation scanning, and OS identification by TCP/IP fingerprinting.
• NSBD: Not-So-Bad Distribution
• Internet software distribution authenticated with PGP.
• Oscar - DSTC's Public Key Infrastructure Project
• PKI toolkit.
• Package Acme.Crypto
• Various Java crypto classes.
• Package java.security
• Java security package docs.
• PC Security Software & Sources
• Brief descriptions of various security programs.
• PGP, logiciel de cryptographie gratuit et en français (PGP pour les français)
• French PGP page.
• PGP Tools
• PGP function library.
• PGPLIB
• DLL which implements various PGP functions.
• PGPNet Server
• A dummy home page for the www.pgp.net domain (incomplete).
• Photuris Test Server
• Photuris session-key management protocol software and test server.
• Private Idaho User's Manual
• Documentation for Private Idaho.
• PPTP-linux: Point-to-Point Tunneling Protocol
• PPTP for Linux (presumably without all of Microsoft's security holes in it).
• PS
• (Relatively) secure encryption using 40-bit keys (designed to bypass silly French restrictions).
• PuTTY: a free Win32 telnet/ssh client
• Telnet/SSH client for Win32.
• Qualcomm Australia crypto software
• sendmail encryption patch, SOBER stream cipher.
• RC4 Stream Cipher Library
• RC4 ActiveX control.
• Reliable Remailer
• cpunk/mix remailer for Windows.
• RIPEM
• RIPEM source code and information.
• RSA Free Utilities
• RSA key generation and encryption for Linux.
• RSAEURO - Cryptography For The World
• European RSAREF providing full source-code compatibility with the original.
• SCNSM
• Win3.1/95/98 non-swappable memory allocator.
• ScramDisk - Free Disk Encryption Software
• Win95 disk encryption using 3DES, Blowfish, IDEA, MISTY, Square, and TEA.
• Secretz
• File encryption using elliptic-curve PKC's and Blowfish.
• Secure FileSystem Information
• The world's best transparent disk encryption software for DOS and Windows (this has nothing to do with the fact the I'm the author :-).
• Secure Logging
• Secure logging for Unix and Windows.
• Security: File wiping
• Links to various file wiping utilities.
• Sir Winston Rayburn - Crypto/Politico
• Various encryption reoutines.
• S/KEY Information
• Information on the S/KEY authentication system.
• Skygate Technology
• Windows NT disk encryption.
• SMB Scanner
• SMB port/machine scanner.
• S/MIME Freeware Library
• S/MIME freeware library (export-controlled, US only).
• SNOW Home Page
• Whitespace steganography software.
• spDES Encryption Control
• ActiveX DES control.
• Speak Freely
• Very nice Unix and Windows speech encryption software.
• Ssh (Secure Shell) Home Page
• Very good encrypted, digital-signature-authentication remote access software (replaces the r* utilities, allows X11 and TCP port redirection over the encrypted connection).
• SSH/SCP for Windows
• ssh/scp port for Win95/NT.
• SSLeay and SSLapps FAQ
• Very nice, free SSL implementation (like Netscape's SSL, but without the bugs and crippled encryption).
• SRP: Secure Password Authentication for the Net
• Secure password-based authentication over insecure networks.
• Systemics Software Archive
• Crypto extensions for perl and Java.
• TC TrustCenter TC_PKCS11
• PKCS #11 software-only token implementation.
• The Cryptography and PGP Page
• Classic ciphers, links to crypto sites, explanations of the maths behind PGP and RSA, privacy issues.
• Therapy
• SSH client for Win32.
• Tiny Encryption Algorithm
• Description and C source code.
• TinyIDEA - 128-bit File Encryption
• 366-byte IDEA file encryption program.
• Tom's Privacy Pages
• Patching Navigator and Explorer to use strong crypto.
• Transparent Cryptographic File System
• Tresor Page
• Mac file encryption using IDEA, written in the free world.
• Trinux: A Linux Security Toolkit
• Floppy-bootable Linux network security toolkit.
• TSS PGPWord... Real Security, Real Easy
• PGP encryption integrated into Word for Windows.
• TTSSH: An SSH Extension to Teraterm
• SSH DLL add-on for Teraterm.
• Uni-GH Siegen - Security-Server - Kryptographie
• Pointers to information on and implementations of a number of conventional, public-key, and hash algorithms.
• Unix tools on Windows NT?
• ssh port to NT via Cygnus gnu-win32.
• Vitas DownLoad area
• Windows'95 password (.PWL) viewer.
• Wei Dai's Crypto++
• C++ class library of cryptographic primitives.
• WinPGP(tm) Home Page
• Windows front-end for PGP.
• Wipe 0.02
• Heavy-duty file wiper for Linux.
• XPDF additions
• Add-on to allow XPDF to decrypt encrypted PDF files.

Have any suggestions for links to go on this page? Be sure to let us know.

Last Updated: November 2, 2008 @ 12:01:50PM EST/EDT Designed & Published by FSU C-SAIT. Please view our legal notices and privacy policy.