Computer and Network Security
CS494/594            Class 4   9/19/06

Topics

• random numbers
• steganography
• classical crypto
• lecture slides (pdf)

class challenges

• Can you find the hidden message in the gif at the top of this page?
• Can you find the secret message in this?

Required reading

• Text: Chapter 2, 7.4, 4.2, 4.3
• Netscape's random number problems
• software generation of random numbers
• steganalysis
• secret language examples, captain midnight decoder ring
• cryptography timeline

  

Additional reading

• RFC 1750 randomness recommendations
• yarrow cryptographhic random number generator
• IEEE P1363 cryptographic random numbers
• egads entropy gathering daemon and spec (Tiny)
• selecting a random number generator determinism, distribution, chaos, security, performance
• attacks on PRNGs or /dev/random
• Analysis of Linux Random number generator
• Barak and Halevi An architecture for robust pseudo-random generation and Applications to /dev/random
• Surveys and Papers on Pseudorandomness
• RSA paper Hardware based random number generation
• smartcard hardware RNG
• hardware RNG Intel RNG on pentium III and using lava lamps
• Using RSA BSAFE with Intel RNG
• RS232 hardware RNG sg100 or orion
• evaluations of VIA RNG and Intel 810 RNG
• HAVEGE random numbers
• TinyRNG random numbers for wireless sensor networks
• HAC chapter 5 random bit generation, PRNG testing
• diehard random tester and ent entropy tester and FIPS 140-1 tests
• FIPS 140-2 approved random number generators and RNG validation list and The Random Number Generator Validation System (RNGVS)
• OpenSSL rand()
• random numbers and DNS/bind attacks
• Texas Hold'em Poker broken random numbers
• random number generators and global consciousness

  steganography

• steganography and digital watermarking
• Anderson's On the limits of steganography
• Network Covert channels
• Neil Johnson's steganography papers
• David Kahn's The Codebreakers on classical cryptography
• hiding info in web pages
• anagrams
• stego software stools-3 and such for windows
• spread spectrum or join the search SETI@home
• whitespace steganography and Rowland's covert TCP channels
• steganographic file system StegFS and Hiding Data Accesses in Steganographic File System
• Copy protection using electronic marking and digital watermarks
• digital watermarking digimarc
• Aladdin's hasp4 dongle against software piracy or hardlock
• Wayner's book Disappearing Cryptography
• Rivest's confidentiality without encryption chaffing and winnowing
• The Bible Code and a critique and refutation and in moby dick
• bacon wrote shakespeare Shake-n-Bacon
• Nostradamus (16th century) predicts Intel pentium bugs
• movie: A Beautiful Mind

  classical crypto

• MISTY mystery tour try cracking 5 historic ciphers
• becoming a cryptographer
• One-time pad faq and wikipedia info and a generator
• World War I cryptography wireless communication (radio), traffic analysis and WWI codes and code breakers ADFGX cipher and WWI communications
• Codes, Ciphers, and codebreaking
• enigma machine or here or here or cryptanalysis of the enigma or here and the movie Enigma
• enigma applet or another
• M-209
• Vigenere applet
• Solutions to Edgar Allen Poe's crypto challenge
• Civil War ciphers or here and other military ciphers and telegraph in the civil war
• SETI@home decrypting messages from outer space
• as always, cruise the security page