CRYPTOLOGY
Generator is a client-side utility that provides the highest level of password security available to client-side JavaScript. It uses the secure hash standard (SHA-1, 1995), and the routines are available for use in JavaScript programs.
 
The test system runs the SHA-1 utility described above through 232 NIST test vectors, to confirm that the utility works.
 
The Nist Cryptographic Module Program Site tells you all about the secure hash standard and provides the original versions of the test vectors.
 
NSA Study is a paper that discusses the possible technical capability of the NSA to attack and break block cyphers. It is the first step in a continuing study (PDF version).
 
Million is a worked out example of a special cryptological protocol, created by Andrew Yao, that allows two millionaires to work out who is richer, without either actually disclosing their worth (PDF version). It is a nice example of how cryptology allows exact control and release of information.
 
CONSULTATION PAPER RESPONSES
ACD03 is a short response to the Home Office’s ‘Access to Communications Data. Respecting Privacy and Protecting the Public from Crime. A Consultation Paper.’, which requested responses by 3 June 2003 (PDF Version). The proposal is to expand the range of public authorities with access to communications data; our view is that such expansion should be as limited as possible, and there should be specific controls commensurate with the level of intrusiveness of the access.
 
EC03 is a very brief response to the DTI’s ‘Consultation Document on Draft Orders to be Made Under the Export Control Act 2002’, which requested responses by 30 April 2003 (PDF Version). It highlights a number of issues with regard to the export of intangibles.
 
IDC03 is a longer response to the Home Office's ‘Entitlement Cards and Identity Fraud: A Consultation’, which requested responses by 31 January 2003 (PDF Version). This response is not in favour of the proposals.
 
DTI99 is the response by PPCL to the DTI’s ‘Building Confidence in Electronic Commerce’ document (URN 99/642, no longer on the DTI site), which requested responses by 1 April 1999 (PDF version). The response is supportive of the Government's initiative whilst going into some of the more detailed issues that are raised by the DTI. However, it does not fully agree with all the DTI proposals, and highlights areas where more discussion is required.
 
INTERNET SECURITY
Upinnov97 is a set of notes that supported a talk given by John R T Brazier at the Innovations 97 Conference, 15/16 September 1997 (PDF version). The talk discussed general Internet security and covered modern cryptology, and is a rather old introduction to these topics.
 
ACROBAT READER
If you do not have the Adobe Acrobat reader, here is a copy on the Adobe site.