From news.rrz.uni-hamburg.de!news.dkrz.de!news.dfn.de!zeus.rbi.informatik.uni-frankfurt.de!terra.wiwi.uni-frankfurt.de!news.th-darmstadt.de!news.uni-mainz.de!usenet Sat Aug 27 20:46:33 1994
Subject: Update: Applied Cryptography Disks
Date: 26 Aug 1994 12:03:30 GMT

Where to find the stuff on Bruce Schneier's Applied Cryptography Disks.

Last updated: Aug 15, 1994

This is the contents of the Applied Cryptography Disks, as posted by Bruce  
Schneier. As comments, merked by a `+' sign at the beginning of the line,  
I added ftp servers that contain the stuff. Because of export regulations  
I only included servers outside US and CA for source and object code.

Thanks to all who contributed to this list. (List of contributors at the  
end.) In most cases I didn't check whether the versions on the disks and  
the versions on the servers are the same.

Additional hints, corrections, and suggestions are welcome

ASSORTED.ZIP  -  Assorted simple cryptography and statistics
     programs, written by Thomas Strong, Jr. in 1993.

BBC.ZIP  -  Big Block Cipher: uses 256K blocks, three random
     number generators, two substitution tables, cipher-text
     feedback, and transpositions.  Written by Peter Boucher. 
     Unknown security.
 + ftp.dsi.unimi.it:
     /pub/security/crypt/code/boucher-big-block-cipher.tar.gz

BIGNUM.ZIP - Bignum class, written in Borland C++ by Bruce Bowen.

BLOWFISH.ZIP - The Blowfish algorithm, written by Bruce Schneier
     in 1994.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/schneier-blowfish.c.gz

CA1_1.ZIP  -  CA algorithm, written by Howard Gutowitz in 1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/ca_1.1.tar.gz

CBW.ZIP  -  Crypt Breaker's Workbench.  Program to help
     cryptanalyze messages encrypted with crypt(1), written by
     Robert W. Baldwin in 1986.
 + black.ox.ac.uk:/src/security/cbw.tar.Z

CRPT-POL.ZIP - "Cryptography: Policy and Technology," report by
     Hoffman, Ali, Heckler, and Hoybechts, of 1 Dec 93.
 + ftp.wimsey.bc.ca:/pub/crypto/Doc/cryptpol.gz

CRYPT1.ZIP  -  UNIX crypt(1) command:  a one-rotor machine
     designed along the lines of Enigma, but considerably
     trivialized.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/ucb-crypt.1.c.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/bin-crypt.c.gz

CRYPT3.ZIP  -  UNIX crypt(3) command, written by Tom Truscott and
     copyright 1989, 1991 by the University of California.

DES-BARR.ZIP  -  DES implementation, fast, written by David A.
     Barrett in 1991.

DES-BISH.ZIP  -  Implementation of DES front end; does ECB, CBC,
     CFB, OFB.  Does not include actual DES code.  By Matt
     Bishop.

DES-KARN.ZIP  -  DES implementation, written by Phil Karn in
     1987.
 + contained in the secude package:
 + black.ox.ac.uk:/src/security/secude-4.1.all.tar.Z

DES-KOON.ZIP  -  DES implementation, fast but large, written by
     David G. Koontz in 1991.

DES-LEVY.ZIP  -  DES implementation, fast and portable, by Stuart
     Levy in 1988.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/pfdes.tar.gz

DES-LOUK.ZIP  -  DES implementation, fast, with main program and
     C function library for arbitrary precision integer
     arithmetic.  Written by Antti Louko in 1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/des-dist.tar.gz
 + black.ox.ac.uk:/src/security/DES-hut.tar.gz

DES-MITC.ZIP  -  DES implementation, written by D.P. Mitchell in
     1983.

DES-OSTH.ZIP  -  DES implementation with several utility programs
     and many useful extra functions, runs on UNIX, written by
     Stig Ostholm, 1990.

DES-OUTE.ZIP  -  DES algorithm, fast and compact, written by
     Richard Outerbridge in 1991.  Supports double and triple
     DES. Includes portable C version, and optimized 680x0
     version.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/d3des.tar.gz

DES-YOUN.ZIP  -  DES implementation, one of the fastest around,
     written by Eric Young in 1992.
 + ftp.uni-stuttgart.de:/pub/unix/tools/crypt/libdes-1.95.tar.Z
 + ftp.uni-stuttgart.de:/pub/unix/tools/crypt/libdes-3.0.tar.gz
 + You might also want to combine the key setting routines of DES-YOUN
 +   with the en/decryption routines in the package DESCORE by
 +   Dana How that was posted to comp.sources.misc as volume 29,
 +   issue 128, see also
 + black.ox.ac.uk:/src/security/descore.shar.gz

ENIGMA.ZIP  -  Software simulation of the German Enigma machine,
     written by Henry Tieman.

ESCROW.ZIP -  A Proposed Federal Information Processing Standard
     for an Escrowed Encryption Standard (EES), NIST, 30 Jul
     1993.

EXAMPLES.ZIP  -  Code examples from APPLIED CRYPTOGRAPHY.

FEAL8.ZIP  -  FEAL-8 algorithm, written in 1989.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/feal8.tar.gz

FEALNX.ZIP  -  FEAL-NX algorithm, written by Peter Pearson in
     1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/fealnx.tar.gz

FIPS171.ZIP  -  FIPS PUB 171, Key Management Using ANSI X9.17,
     dated 27 April 1992.
 + csrc.nist.gov:/pub/nistpubs/fips171.txt

FIPS180.ZIP  -  FIPS PUB 180, Secure Hash Standard, dated 11 May
     1993.
 + csrc.nist.gov:/pub/nistpubs/fips180.txt

FIPS181.ZIP  -   FIPS PUB 181, Automated Password Generator, dated
     5 October 1993, with C source code.
 + csrc.nist.gov:/pub/nistpubs/fips181.txt
 + ftp.uni-stuttgart.de:/pub/doc/security/fips181.txt
 + black.ox.ac.uk:/DOCS/security/fips181.txt.Z

FIPS185.ZIP  -  FIPS PUB 185, Escrowed Encryption Standard, dated
     8 Febuary 1994.
 + csrc.nist.gov:/pub/nistpubs/fips185.txt

FREQ.ZIP  -  Program to count the frequency of every letter in a
     file, written by Peter Boucher.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/
     boucher-chi-square-frequency-analysis.c.gz

GOST.ZIP  -  The Soviet GOST algorithm (without the correct S-
     boxes), written by Colin Plumb in 1993.

GRENBOOK.ZIP  -  Draft 4.0 of the Green Book, the European
     computer security specification, dated 18 Oct 1993.
 + ftp.informatik.uni-hamburg.de:/pub/virus/texts/security/grnbook.zip
 + ftp.uni-stuttgart.de:/pub/doc/security/green-book-4.0/
 + black.ox.ac.uk:/DOCS/security/green-book-4.0.txt.gz

HASHES.ZIP  -  MD5 and SHA, optimized for speed by Colin Plumb in
     1993.

HAVAL.ZIP  -  HAVAL algorithm.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/haval.tar.gz

HILL.ZIP  -  Hill cipher.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/hill.gz

I-HAT.ZIP  -    C code for various cryptographically-useful
     statistical analysis functions:  Kullback's information
     measure for a 2-way contingency table, Gamma and repeated
     functions (Poisson, chi-square, etc.), Pearson's chi-square,
     etc.  By Doug Gwyn, 1991.

IDEA_C.ZIP  -  IDEA algorithm in C, optimized for speed by Colin
     Plumb in 1993.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/idea.V1.1.tar.Z
 + ftp.dsi.unimi.it:/pub/security/crypt/code/idea.lha
 + ftp.dsi.unimi.it:/pub/security/crypt/code/idea.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/idea22a.zip

IDEA68K.ZIP  -  IDEA algorithm in 68000 assembly, written by
     Colin Plumb in 1993.

IDEA8086.ZIP  -  IDEA algorithm in 8086 assembly, written by
     Colin Plumb in 1993.

ISOMORPH.ZIP  -  Utility that prints isomorphs, written by Paul
     Leyland.

INDEX.ZIP  -  Index to APPLIED CRYPTOGRAPHY.

ITAR.ZIP  -  Imported and Exported Defense Articles and Services,
     Vol. 57, No. 89, Pari II, 56 FR 19666, 7 May 1992.  By the
     Department of State.
 + ftp.informatik.uni-hamburg.de:/pub/virus/texts/security/itar9307.zip
 + black.ox.ac.uk:/src/docs/itar9307.zip (contains both the WordPerfect
      and an ASCII version of the document)

KERBEROS.ZIP -  Kerberos RFC (1510), dated Sep 1993.
 + ftp.th-darmstadt.de:/pub/docs/rfc/RFC1500-1599/rfc1510.txt.Z

KHUFU.ZIP  -  This archive contains KHUFU.C, a hack
     implementation of the Khufu algorithm written by Rayan
     Zachariassen in 1989.  It also contains PRSBOX.H, PRSBOX.C,
     and MAKEFILE, a program to print S-boxes written by Landon
     Curt Noll in 1989.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/khufu.tar.gz

LCRNG.ZIP  -  Linear congruential random number generator.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/linear-rng.tar.gz

LCRNG-T.ZIP  -  Simple block transposition cipher based on a
     linear congruential random number generator, written by R.A.
     O'Keefe.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/okeefe.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/okeefe_encrypt.tar.gz

LOKI.ZIP  -  LOKI89 and LOKI91, written by Leslie Condie in 1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/loki-3.0.tar.gz

LUCIFER1.ZIP  -  LUCIFER algorithm written by Jonathan M. Smith
     in 1991.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/lucifer-smith.c.gz

LUCIFER2.ZIP  -  LUCIFER algorithm written by Graven Cyphers.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/lucifer.shar.gz
 +  
ftp.dsi.unimi.it:/pub/security/crypt/code/lucifer-outerbridge-5.0.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/lucifer-outerbridge.c.gz

MD-RFC.ZIP  -  Internet RFCs (Requests for Comment) for MD2, MD4,
     and MD5.
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/rfc1319.txt.gz
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/ rfc1320.txt.gz
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/ rfc1321.txt.gz

MD4.ZIP  -  MD4 algorithm, written by RSA Data Security, Inc.
 + black.ox.ac.uk:/src/security/skey/md4.c
 + black.ox.ac.uk:/src/security/skey/md4.h
 + also contained in the secude package

MD4-DOS.ZIP  -  MD4 algorithm, fast DOS implementation by Jouka
     Holopainen.

MD5-KARN.ZIP  -  Optimization of RSA's MD5 code for 80386,
     written by Phil Karn in Feb 1992.
 + for the original MD5 code see:
 + ftp.dsi.unimi.it:/pub/security/crypt/code/MD5.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/karn-md5-cipher.tar.gz
 + black.ox.ac.uk:/src/security/MD5.tar.gz
 + black.ox.ac.uk:/src/security/md5.zip
 + also contained in the secude package

MIMIC.ZIP  -  Peter Wayner's Mimic function.

NEWDE.ZIP  -  NewDE algorithm, a DES variant used in the
     Macintosh program StuffIt (versions 1.51 and 2.0); written
     by Richard Outerbridge in 1991.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/newde.tar.gz

NEWDES.ZIP  -  NewDES algorithm, written by Mark Riordan in 1990.

NHASH.ZIP  -  N-Hash algorithm, written in 1993.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/nhash.c

NSEA.ZIP  -  Nonpatented Simple Encryption Algorithm, written by
     Peter Gutmann.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/nsea.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/nsea.zip

PEM-RFC.ZIP  -  Internet RFCs (Requests for Comment) for the
     Privacy Enhanced Mail standard:  RFC1421, RFC1422, RFC1423,
     and RFC1424.
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/rfc1421.txt.gz
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/rfc1422.txt.gz
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/rfc1423.txt.gz
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/rfc1424.txt.gz

PGP.ZIP  -  A list of places to download PGP from.
 + many sites, e.g. ftp.dsi.unimi.it:/pub/crypt/PGP/...
 +                  black.ox.ac.uk:/src/security/...
 + If you have access to the World Wide Web (WWW), get a list from
 + http://www.mantis.co.uk/pgp/pgp.html

PKC.ZIP  -  Public-Key Cryptography, a 162-page tutorial written
     by James Nechvatal of NIST in 1991.
 + ftp.informatik.uni-hamburg.de:/pub/virus/texts/crypto/pubcrypt.zip

PLAYFAIR.ZIP  -  Playfair algorithm, written by Paul Leyland in
     1993.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/playfair.mrr

PPSC.ZIP  -  Pass-Phrase Stream Cipher, written by Peter Boucher
     in 1992.

PRNGXOR.ZIP  -  Source code that illustrates polyalphabetic
     substitution with a running key stream, written by Carl
     Ellison in 1993.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/tran-and-prngxor.shar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/tran-and-prngxor.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/pittner-prng-cipher-3.c.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/pittner-prng-cipher.c.gz

PRV-ANMT.ZIP - "Privacy and Anonymity on the Internet":
     comprehensive summary by L. Detweiler in 1993.
 + This is regularly posted to sci.crypt, alt.privacy, and some other
      newsgroups.

RANDOM1.ZIP  -  Random number generator that uses phase noise in
     PC crystals to generate random bits, written by Nico E de
     Vries in 1992.

RANDOM2.ZIP  -  Schematic for cheap hardware random bit
     generator.

REDOC2.ZIP  -  REDOC2 algorithm written by Michael Wood.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/redoc2.c.gz

REDOC3.ZIP  -  REDOC3 algorithm, written by Michael Wood.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/redoc3.c.gz

RIPE-MD.ZIP  -  RIPE-MD function, written by the RIPE project in
     1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/ripe-md.tar.gz

RIPEM12A.ZIP  -  Mark Riordan's Privacy Enhanced Mail, Version
     1.2a, current as of April 1994.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/ripem-1.2a-0.tar.Z

RSA-FAQ.TXT - RSA Data Security's Frequently Asked Questions
     about Cryptography file.  Version 2.0, last updated 20 Sep
     1993.
 + ftp.dsi.unimi.it:/pub/crypt/rsa.com/faq/

RSAREF20.ZIP  -  RSA Data Security Inc.'s reference
     implementation of RSA.  Includes code for DES and MD5.
     Bignum package can be easily modified to do El Gamal,
     Diffie-Hellman, DSA, etc.  Version 2.0.
 + ftp.dsi.unimi.it:/pub/crypt/math/rsaref.tar.gz
 + ftp.dsi.unimi.it:/pub/crypt/math/rsaref2.tar.gz
 + black.ox.ac.uk:/src/security/rsaref.tar.gz
 + black.ox.ac.uk:/src/security/rsaref2.tar.gz

SCICRYPT.ZIP  -  The Frequently-Asked Questions file for the
     Internet newsgroup, sci.crypt.
 + ftp.dsi.unimi.it:/pub/crypt/docs/sci.crypt-FAQ.gz
 + ftp.dsi.unimi.it:/pub/crypt/docs/sci.crypt.faq.gz
 + black.ox.ac.uk:/DOCS/security/sci.crypt.faq.Z

SHA.ZIP  -  Secure Hash Algorithm, written by Peter Gutmann in
     1992.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/SHS.tar.gz
      (this first one contains a file with the Peter
      Gutmann implementation)
 + ftp.dsi.unimi.it:/pub/security/crypt/code/gillogly-sha.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/sha.tar.gz
 + ftp.informatik.uni-hamburg.de:/pub/virus/texts/crypto/shs.zip

SHARING.ZIP  -  Code to implement a threshold scheme, written by
     Peter Pearson in 1993.

SNEFRU.ZIP  -  Snefru algorthm, written by Ralph Merkle in 1989.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/snefru.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/snefru2.5a.tar.gz

SPLAY.ZIP  -  Compression and encryption in C based on splay
     trees.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/splay.tar.gz

TIS-PEM.ZIP  -  The Frequently Asked Questions file about the TIS
     implementation of PEM.  Last updated 29 Oct 93.  Includes
     where to get a copy.
 + ftp.belnet.be:/pub/security/crypt/tispem/tispem.FAQ

TRNSPOSE.ZIP  -  Cipher that does a transposition of a 8192 byte
     block, based on a random number generator, by William
     Setzer.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/setzer-trans.tar.gz

VIGENERE.ZIP  -  A program that encrypts using Viegnere,
     Beauford, or Variant Beauford ciphers.  Written by Leisa
     Condie in Dec 1992.

VIGSOLVE.ZIP  -  Program to solve Vigenere cipher, by Mark
     Riordan in 1991.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/solve-vigenere-4.tar.gz
 + ftp.dsi.unimi.it:/pub/security/crypt/code/solve-vigenere.tar.gz

WPCRACK.ZIP  -  Program to break WordPerfect's encryption,
     written by Ron Dippold in 1991.
 + ftp.dsi.unimi.it:/pub/security/crypt/code/wpcrack.tar.gz

ZIP.ZIP  -  The encryption algorithm used in the PKZIP 2.04g
     and zip 2.0.1 compression programs.  The algorithm was designed by
     Roger Schlafly.
 + garbo.uwasa.fi:/unix/arcers/zcrypt21.zip

Assembled by 

Klaus Pommerening
Institut fuer Medizinische Statistik und Dokumentation
der Johannes-Gutenberg-Universitaet
D-55101 Mainz, Germany

with help by:

Bruce Schneier, who posted the contents of his disks,
bontchev@informatik.uni-hamburg.de (Vesselin Bontchev),
Marc Vauclair <vauclair@vvcomp.be><Marc.Vauclair@Belgium.EU.net>,
Jean-loup Gailly <jloup@chorus.fr>

