Cryptography and Security

• Counterpane Systems, Bruce Schneier's computer security and cryptography consulting firm
• Crypto.com, Matt Blaze's cryptography resource
• cryptographic algorithms
  • TEA, the Tiny Encryption Algorithm
• Cryptography Export Control Archives
• Cryptome
• CypherPunks
• Encryption pageat the Center for Democracy and Technology's web site
• FreeS/WAN: an implementation of IPSEC & IKE for Linux for creating VPNs
• Gibson Research Corporation, home of some interesting security papers and software
  • The Strange Tale of the Denial of Service Attacks Against GRC.COM, a fascinating article on distributed denial-of-service attacks, countermeasures, and futility
  • Shields UP!: checks the Internet security of your Windows computer
• GnuPG: Gnu Privacy Guard, a PGP-compatible encryption program
• Honeynet Project, whose goal is to learn the tools, tactics, and motives of the blackhat community, and share those lessons learned
• International Association for Cryptologic Research
• International Computer Security Association
• Mindbright, authors of the free MindTerm and MindVNC programs. (I can't vouch for them since I haven't got them to work yet, but they're both interesting ideas.)
• OpenSSH
• OpenSSL
• Overclocking SSL: how to make SSL perform well
• OWASP: Open Web Application Security Project. Note particularly their list of the top ten web security vulnerabilities.
• Password generator bookmarklet: I won't vouch for the security of this Javascript hack, but it is an excellent idea.
• Passwords multiply as users' rage rises
• PGP, Inc.
• PGPi, the International PGP Home Page
• Putty, an SSH client for Windows NT
• Quantum cryptography
• Ron Rivest's collection
• Scanning data for entropy anomalies: a blog entry on finding keys and other high-entropy data in otherwise normal files
• Secure Anti-Cencorship Proxyrun by C. Scott Ananian, a graduate student at MIT LCS
• Security information provided by Tezcat Communications
• Soft Security: The idea is to protect the system and its users from harm, in gentle and unobtrusive ways.
• Softwar: fascinating information on national security and politics
• Software Key Escrow
• STunnel, universal SSL wrapper
• StupidSecurity.com: Exposing Fake Security Since 2003
• Web security technical information
  • SSLprotocol from Netscape
• Zero Knowledge Systems, who make software that protects privacy and anonymity on the Internet