linux-ipsec: Bibliography

From: Sandy Harris <sandy.harris(at)sympatico.ca>
Date: Tue Jan 19 1999 - 12:22:03 EST

I'm constructing a bibliography of references one might need in order to understand, extend or administer Linux FreeS/WAN.

First draft is below. I'd welcome any of:

	comment or criticism
	short reviews of relevant books
	suggestions
		other books
		web links (to go in another document)
	requests: "Where do I get a reference on ...."

I'm also working on a glossary, mostly decoding the alphabet soup, SPI, ESP, ... That's not yet in a postable state. Suggestions for it are also welcome.

---

Bibliography for the Linux FreeS/WAN project

Sandy Harris January 1999

---

Alphabetical by last name of first author:  

Albitz, Liu & Loukides "DNS & BIND" 3rd edition

	O'Reilly 1998
	ISBN 1-56592-512-2

The standard reference on the Domain Name Service and Berkeley Internet Name Daemon.

Chapman, Zwicky & Russell "Building Internet Firewalls"

	O'Reilly 1995
	ISBN 1-56592-124-0

Cheswick and Bellovin
"Firewalls and Internet Security: Repelling the Wily
Hacker"

	Addison-Wesley 1994
	ISBN 0201633574

A fine book on firewalls in particular and security in general from two of AT&T's system adminstrators.

Comer "Internetworking with TCP/IP"

	Prentice Hall
	Vol. I: Principles, Protocols, & Architecture, 3rd Ed.
		1995 ISBN:0-13-216987-8
	Vol. II: Design, Implementation, & Intervals, 2nd Ed.
		1994 ISBN:0-13-125527-4
	Vol. III: Client/Server Programming & Applications
		AT&T TLI Version		1994 ISBN:0-13-474230-3 
		BSD Socket Version	1996 ISBN:0-13-260969-X
		Windows Sockets Version 1997 ISBN:0-13-848714-6

If you need a detailed reference, this is it. Recommended for anyone who needs to deal with the network at a level where reading the RFCs is required. Read this series first.

Electronic Frontier Foundation
"Cracking DES: Secrets of Encryption Research, Wiretap
Politics and Chip Design"

	O'Reilly 1998
	ISBN 1-56592-520-3

To conclusively demonstrate that DES is inadequate for continued use, the EFF built a machine for just over $200,000 that breaks DES encryption in under five days on average, under nine in the worst case.

The book provides details of their design and, perhaps even more important, discusses why they felt the project was necessary. Recommended for anyone interested in any of the three topics mentioned in the subtitle.

EFF page on this project is:
http://www.eff.org/descracker.html

Martin Freiss "Protecting Networks with SATAN"

	O'Reilly 1998 ISBN 1-56592-425-8
	translated from a 1996 work in German

SATAN is a Security Administrator's Tool for Analysing Networks. This book is a tutorial in its use.

Garfinkel "PGP: Pretty Good Privacy"

	O'Reilly 1995 
	ISBN 1-56592-098-8

Garfinkel & Spafford "Practical Unix Security"
	O'Reilly 1996
	ISBN 1-56592-148-8

A standard reference.
Spafford's web page has an excellent collection of crypto and security links:
http://www.cs.purdue.edu/coast/hotlist

David Khan "The Codebreakers" second edition

	1st ed was 1967, MacMillan
	2nd ed ???????

A history of codes and code-breaking from ancient Egypt to the 20th century. Well-written and exhaustively researched. Highly recommended.

The first edition had very little on computer cryptography and nothing on Ultra, the great British codebreaking project of World War Two. The Ultra story had not been made public when the book was written. Presumably the second edition expands these areas.

Olaf Kirch "Linux Network Administrator's Guide"

	O'Reilly 1995
	ISBN 1-56592-087-2

Now becoming somewhat dated in places, but still a good introductory book and general reference.

Bruce Schneier "Applied Cryptography, Second Edition"

	John Wiley & Sons, 1996
	ISBN 0-471-12845-7 hardcover
	ISBN 0-471-11709-9 paperback

The definitive reference on computer cryptography. For more recent essays, see the author's company's web site:
http://www.counterpane.com

-- 


"The real aim of current [cryptography] policy is to ensure the


 continued effectiveness of US information warfare assets against
 individuals, businesses and governments in Europe and elsewhere" 
       Ross Anderson, Cambridge University

Received on Tue Jan 19 13:32:43 1999