ISA 666

George Mason University
Department of Information and Software Engineering
ISA 666 - Internet Security Protocols

Fall 2005
Dr. Edward Schneider

(703) 845-6626 (Office) / ESchneider@ise.gmu.edu

Final exam, due Monday 12 December: MS word PDF

For those of you running Linux, try GNU Privacy Guard (GPG): download my key and try to send me an encrypted message. Let me know your experience.

Topics:

29 August: Introduction to Security.

Kaufman, Perlman, and Speciner: Chapter 1.
Common Criteria
Information Assurance Technical Framework, sections 1 and 4.1-4.4.

5 September: Labor Day, no class
12 September: Introduction to Cryptography.
- Kaufman, Perlman, and Speciner: Chapter 2 and 3. Try some of the problems.
- Dr Lawrie Brown. Lecture Notes for Use with Cryptography and Network Security by William Stallings. Classical Cryptography.
- Mark Vandenwauver. Introduction to Cryptography.
- Bruce Schneier. Why Cryptography Is Harder Than It Looks
19 September: Cryptographic Modes, Number Theory, Public Key Cryptography.
- Kaufman, Perlman, and Speciner: Chapters 4, 6, and 7. Note: chapter 8 will not be covered, but feel free to read it for your enjoyment.
- Stallings' figures for DES and modes.
- Stallings' figures for AES.
- Dr Lawrie Brown. Lecture Notes for Use with Cryptography and Network Security by William Stallings. Block Ciphers.
- Dr Lawrie Brown. Lecture Notes for Use with Cryptography and Network Security by William Stallings. Number Theory and Public Key Cryptography.
- RSA Laboratories' Frequently Asked Questions About Today's Cryptography.
- Ronald L. Rivest, Adi Shamir, and Leonard M. Adleman. A Method for Obtaining Digital Signatures and Public-Key Cryptosystems. Communications of the ACM 21,2 (Feb. 1978), 120--126.
- E. Rescorla. Diffie-Hellman Key Agreement Method. IETF RFC 2631, June 1999.
26 September: Cryptographic Hashes, Digital Signature Standard (DSS).
- Kaufman, Perlman, and Speciner: Chapters 5, 6.5.
- Stallings' figures for hashes.
- Dr Lawrie Brown. Lecture Notes for Use with Cryptography and Network Security by William Stallings. Authentication, Hash Functions, Digital Signatures. Includes RSA, DSA, X.509, Needham-Schroeder, Kerberos.
- R. Rivest. The MD5 Message-Digest Algorithm. IETF RFC 1321, April 1992.
- NIST. Secure Hash Standard (SHS). FIPS PUB 180-2, August 2002. Includes SHA-1.
- NIST. Digital Signature Standard (DSS). FIPS PUB 186-2, January 2000.
3 October: PKI, Authentication Protocols.
- Kaufman, Perlman, and Speciner: Chapters 15 and 11.
- NIST. Introduction to Public Key Technology and the Federal PKI Infrastructure. SP 800-32, February 2001.
- R. Housley, W. Ford, W. Polk, and D. Solo. Internet X.509 Public Key Infrastructure Certificate and CRL Profile. IETF RFC 2459, January 1999.
- IATF, sections 8.1.1 and 8.1.2
11 October: Kerberos, review.
- Kaufman, Perlman, and Speciner: Chapters 13 and 14.
- J. Kohl and C. Neuman. The Kerberos Network Authentication Service (V5). IETF RFC 1510, September 1993.
- William Stallings. Cryptography and Network Security. Chapter 14 tables.
17 October: Midterm exam.
24 October: IPSec.
- Kaufman, Perlman, and Speciner: Chapter 17.
- S. Kent and R. Atkinson. IP Authentication Header. IETF RFC 2402, November 1998. Draft Update.
- S. Kent and R. Atkinson. IP Encapsulating Security Payload (ESP). IETF RFC 2406, November 1998. Draft Update.
- M. Murhammer, T. Bourne, T. Gaidosch, C. Kunzinger, L. Rademacher, and A. Weinfurter. A Comprehensive Guide to Virtual Private Networks, Volume I, Chapter 3: Description of IPSec. IBM Redbook SG24-5201-00, June 1998.
- William Stallings. Cryptography and Network Security. Chapter 16 figures, figures 3, 6, 7, 9, 10.
31 October: IKE, SSL.
- Kaufman, Perlman, and Speciner: Chapters 18-19.
- D. Maughan, M. Schertler, M. Schneider, and J. Turner. Internet Security Association and Key Management Protocol (ISAKMP). IETF RFC 2408, November 1998.
- D. Harkins and D. Carrel. The Internet Key Exchange (IKE). IETF RFC 2409, November 1998. Draft Update.
- T. Dierks and C. Allen. The TLS Protocol, Version 1.0. IETF RFC 2246, January 1999. Draft Update.
- R. Macgregor, C. Ezvan, L. Liguori, and J. Han. Secure Electronic Transactions: Credit Card Payment on the Web in Theory and Practice, Appendix C: Secure Sockets Layer. IBM Redbook SG24-4978-00, June 1997.
7 November: SSH, S/MIME.
- T. Ylonen and C. Lonvick. SSH Protocol Architecture. Internet draft, March 2005.
- T. Ylonen and C. Lonvick. SSH Transport Layer Protocol. Internet draft, March 2005.
- T. Ylonen and C. Lonvick. SSH Authentication Protocol. Internet draft, March 2005.
- T. Ylonen and C. Lonvick. SSH Connection Protocol. Internet draft, March 2005.
- B. Ramsdell, Editor. S/MIME Version 3.1 Message Specification. IETF RFC 3851, July 2004.
14 November: SET, CORBASec.
- R. Macgregor, C. Ezvan, L. Liguori, and J. Han. Secure Electronic Transactions: Credit Card Payment on the Web in Theory and Practice, Part 1 (chapters 1-4): The Theory. IBM Redbook SG24-4978-00, June 1997.
- David Chizmadia. A Brief Introduction to the OMG's Security Specifications. DOCSec Tutorial, April 2003.