CS 398: Cryptography and Information Security

Course Information for Spring 2008

Time: Mon. & Wed. 1:00-2:15
Place: Keyes 103

Instructor Information

Prof. Scott Russell
Office: Mudd 416A
Phone: (207) 859-5855
e-mail: srussell (at) colby (dot) edu
class mailing list: cs398 (join here)

Office Hours: Mon., Wed., Thurs. 2:30-3:30, Tues. 3:30-4:30, and by appointment

Course Description

The goal of the course is to acquaint you with the main cryptographic primitives used to enable information security. This includes but is not limited to pseudorandom generators, symmetric and asymmetric encryption, message authentication codes, and digital signatures. We will develop suitable definitions for each primitive by precisely describing the desired functionality and possible attacks against them. While some probability and number theory will needed, I don’t expect you to know it coming it. What I do expect from you is a certain level of mathematical/logical/critical thinking skills. You will need to be able to make convincing and coherent arguments in which steps following logically from one another.

** Final project **

Detail/ideas
Short written proposal: due 3/21

Textbooks

There is no required text for the course. We will make use of a variety of on-line lecture notes and other content. A partial list of these appear below. Feel free to send me additional, relevant links that you unearth over the course of the semester.

On-line Lecture Notes
** Bellare and Rogaway’s Modern Cryptography (undergrad) course notes **
Bellare and Rogaway’s Modern Cryptography (graduate) course notes
Bellare and Goldwasser’s Lecture Notes on Cryptography
Leo Reyzin’s Fundamentals of Cryptography course notes

On-line Book Contents
Handbook of Applied Cryptography, Menezes, van Oorschot, Vanstone
Modern Cryptography: Theory and Practice by Wenbo Mao (via Safari Books Online)
(click on the online resource link and then the "Start reading online" icon)
Currently Safari Books Online subscription list
entire Safari title list (let me know if there is something we should add)

Secure Sockets Layer/Transport Layer Security (SSL/TLS) resources
IETF’s TLS Protocol Version 1.1 standard (RFC 4346)
PureTLS (free Java SSL/TLSimplementation) by Eric Rescorla, the author of SSL and TLS
Open SSL Project
Network Security with OpenSSL by Pravir Chandra, Matt Messier, and John Viega

DES/AES resources
DES standard (NIST FIPS 46-3)
AES standard (NIST FIPS 197)

Standards bodies
The Internet Engineering Task Force (IETF)
National Instutue of Standards and Technology (NIST)
American National Standards Institute (ANSI)
International Organization for Standardization (ISO)
International Telecommunication Union (ITU-T)

Other crypto. related books
Crypto: How the Code Rebels Beat the Government Saving Privacy in the Digital Age by Steven Levy
The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography by Simon Singh
The Codebreakers: The Comprehensive History of Secret Communication from Ancient Times to the Internet by David Kahn