We want everything ... well, almost. Here's a current list of
wants, there may be others:
-
Hardware.
-
Dr Dobbs article. Look at their
author's notes.
Also, there is the
QuickStart notes.
-
Mathematical algorithms. See for example algorithms in Chapters
2,
3,
4,
5,
14
in C from Pate Williams for the book
Handbook of Applied Cryptography, Menezes, et al.
-
DSA algorithm.
We need the JCA algorithms for the free Java
implementations that do not/can not use the JCA. So we probably
also need the DSA sig algorithm. What others are in the SUN
provider?
-
P1363 standard. This is a new standard for public key cryptography
that we want to be compatible with. Includes things like:
- Rabin-Williams
- elliptic curve schemes
- OAEP encryption padding (an improvement over PKCS#1)
- standard ASN.1 types for keys, etc.
Their home page is here
(username "P1363", password "MarsRoks").
-
A course! Yes, I'd like to do an online, interactive course
in applied cryptography. Something like:
- coupled with Cryptix code: exercises, projects
- written or guided by an academic name
- a series of modules:
number theory, cryptography, practical, protocols
- along the style of the OU
- assume programming and some mathematical ability.
- exams? a certificate? a tutor mailgroup?
Here's a list of existing
meatspace courses.
-
PKI - either pick up SPKI or extend Open PGP.
-
PRNG - generation of random numbers. This area is
always controversial, so could do with some attention:
- analysis of random numbers generated by current methods
- simple test programs to analyse results
- new modules using different methods
- documentation of issues, work done, results of analysis
perhaps in a CAN.
-
IPSec - whilst C IP stacks aren't really our area, there
is some possibility that an all-Java kernel and IP stack
will find a place in things like the NC or smart cards.
-
The interesting and secure secret key algorithms in Schneier,
accompanied by test and examples. E.g.,
- GOST
- 3-WAY
- CA-1.1
- FEAL
- DESX (used by IPSec)
- RC5
- Snuffle :-)
- streams: WAKE ...
Actually, there are only a few of them left, and even the ones
mentioned above have variable records....
But, there is no new edition of
Schneier in the pipeline, so there is plenty of time.
-
Alternative PK algorithms and packet formats: DH, ...
-
Open PGP (based on pgp5.0) as it is being standardised by the
open-pgp
IETF group (see page for mailgroup).
A
working draft
for the standard is in progress.
Here is a page with all the
Open PGP Implementors.
-
Examples, documentation (CAN) for the use of Cryptix with Applets.
-
PKCS certificates.
-
Electronic Commerce protocols:
Or, do electronic commerce protocols belong elsewhere?
Opinions may differ.