Computer and Network Security
CS494/594            Class 6   10/3/06

Topics

• AES cipher
• stream ciphers (RC4, LFSR)
• symmetric key management
• review
• lecture slides

Required reading

• Text: Chapters 4, 5 and 6, 7.1-7.3, 12.2
• Minimal key lengths for symmetric ciphers
• Microsoft RC4 flaws WORD/Excel
• crypto performance for MD5, SHA, Panama, Rijnadel, DES, 3DES, Square, RSA, and more
• snake oil FAQ -- avoiding bogus encryption products

Additional reading

• NIST AES and the AES FAQ
• AES finalists serpent and twofish and rc6 and mars and rijndael
• Savard's Rijndael page with illustrations
• square cipher forerunner to rijndael
• 2.29 GB/s Rijndael chip
• AES and XLS attack and here
• Europe's NESSIE crypto selection and selected algorithms
• Japan's CRYPTREC crypto selection
• AES and CCM RFC 3610 or NIST 800 38C and critique of CCM
• skipjack and kea specs and skipjack review and skipjack.c
• clipper chip and Denning's key escrow paper
• FIPS 185 Escrowed Encryption Standard (EES)
• key escrow systems
• microsoft and rc4 flaws and here
• snow stream cipher
• LFSR info
• prime/primitive/irreducible polynomials more prime polynomials
• primitive or irreducible polynomials and here
• LFSR animated applet or LFSR applet
• Cryptanalysis of ORYX LFSR ciphers for cell phones
• cryptanalysis of A5 GSM stream cipher (LFSR), and other
• HAC chapter 6 stream ciphers, LFSR's
• Savard's stream cipher tutorial
• Dawson/Nielsen Automated cyrptanalysis of XOR plaintext strings
• WEP security flaws Wired Equivalent Privacy (RC4 abuse)
• tinysec lightweight link encryption for wireless sensors (skipjack, cbc-mac)
• SAFER block cipher, and SAFER+ AES candidate, bluetooth and safer++ Nessie submission (bluetooth)
• Shamir secret sharing or here
• Wei Dai's crypto++ C++ crypto source (MD5, Rijndael, RSA, etc.)
• Perl Rijndael
• CRC intro
• Schneier on snake oil
• DigiCrime decrypting service -- not for the humor-impaired
• as always, cruise the security page