CS 470: Introduction to Applied Cryptography

2012-2013 Spring

• Instructor: Dr. Ali Aydin Selcuk
  Office: EA 428
  Telephone: 290-1352
  E-mail: selcuk@cs.bilkent.edu.tr
  Office hour: Tuesday 9:40-10:30 or by appointment
  

• Assistant: Mustafa Battal
  Office: EA 425
  E-mail: mustafa.battal@cs.bilkent.edu.tr
  Office hour: Wednesday 14:40-15:30 or by appointment
  

• Textbook: Network Security: Private Communication in a Public World, 2nd Edition. C. Kaufman, R. Perlman, and M. Speciner. Prentice-Hall.

• Syllabus: (pdf)
  Traditional cryptosystems
  Block ciphers
  Stream ciphers
  Hash functions
  Public key encryption
  Digital signatures
  Threshold cryptography
  Key management
  Authentication systems
  Kerberos
  IPsec
  SSL/TLS
  E-mail security
  Selected topics
  

• Homework Assignments:
  Homework #1
  Homework #2
  Homework #3
  

• Projects:
  Project #1 pdf / starter code ^[1]
  

• Handouts:
  

  • Rijndael, Joan Daemen, Vincent Rijmen.
    
  • Intercepting Mobile Communications: The Insecurity of 802.11, Nikita Borisov, Ian Goldberg, David Wagner.
    
  • One-way compression function,
  • Merkle-Damgard construction,
  • MD5,SHA-1, Wikipedia.
    
  • Basic Number Theory Fact Sheet I, Fact Sheet II, Dan Boneh.
    
  • Mozilla's Root CA Policy, Mozilla Wiki
  • Root CA Policies of Systems and Browsers, Andreas Arnold
  • The Inconvenient Truth about Web Certificates, Nevena Vratonjic, Julien Freudiger, Vincent Bindschaedler, Jean-Pierre Hubaux
  • SSL And The Future Of Authenticity (video), Moxie Marlinspike
  • Defeating SSL Using SSL-Strip (video), Moxie Marlinspike
  • The Most Dangerous Code in the World: Validating SSL Certificates in Non-Browser Software, Martin Georgiev et al.
  • Analysis of the Linux Random Number Generator, Zvi Gutterman, Benny Pinkas, Tzachy Reinman
  • Problem Areas for the IP Security Protocols, Steve M. Bellovin
  • Understanding IKEv2: Tutorial, and Rationale for Decisions, Radia Perlman(Slides)
  • TLS, Wikipedia
  • Weak Authentication: How to Authenticate Unknown Principals without Trusted Parties, Jari Arkko, Pekka Nikander
  • Mobile IPv6 Security (video - requires Internet Explorer) (video) (ZIP file)

• Lecture Notes:
  

  • Introduction

  • Block Ciphers, I

  • Block Ciphers, II

  • Encrypting with Block Ciphers

  • Authenticating with Block Ciphers

  • Stream Ciphers

  • Cryptographic Hash Functions

  • Public Key Cryptography

  • RSA

  • ElGamal Cryptosystem

  • Key Distribution

  • Public Key Infrastructures

  • E-Mail Security

  • Authentication Systems

  • Cryptographic Authentication Protocols

  • Needham-Schroeder Protocol

  • Kerberos

  • Real-Time Communication Security

  • IPsec: AH & ESP

  • IPSec: ESP Attacks

  • IPSec: IKE

  • SSL/TLS & SET

  • SSL Trust Model in Practice

  • The Big Picture

• Grading:^[1]
  Attendance: 3%
  Quiz: 17%
  Project: 9%
  Homework: 16%*
  Midterm: 25%
  Final: 30%