Web hosting Custom Email SiteBuilder

Bronnen & Links

Nederlandse verwijzingen

• Versluieren data
• Cryptography Course H.v.d.Meer
• Encryptie: sleutel tot informatiemaatschappij of tot criminaliteit?

Cryptografie

• Security and Encryption@
• Crypto-Log: Internet Guide to Cryptography
• The Crypto Drop Box
• Cryptography: The Study of Encryption
• RSA Labs Frequently Asked Questions: Main Table of Contents
• Museum Tour
• Quadralay Cryptography Archive
• Welcome to the RSA Factoring-By-Web Project!
• MAW 97 Links: Cryptography and Security
• 
  Notes on Cryptography

Recommendations, Drafts and Papers on Crypto Politics and Legal Issues

• Kort om Krypto explains the views of Svenska Arbetsgivareföreningen on cryptography (in Swedish) (PDF) 
• A European Initiative in Electronic Commerce (30 May 97) is a communication COM(97)157 to European Parliament
• UK's Labour party views on encryption (Unknown) in their Information Superhighway commentary
• European Commission Legal Advisory Board: Digital signatures and encryption (01 Sep 1997) with links to several countries' proposals and laws
• European Commission Legal Advisory Board: Data protection (Privacy) (01 Sep 1997) with links to several interesting sites
• Avseende användning av kryptering (29 May 1997) (in Swedish) has Swedish IT commission's views on encryption from May 1997
• IT-kommissionen föreslår fri kryptering (01 Jul 1997) (in Swedish) has Swedish IT commission's press release of the above 
• Rapport fra ekspertudvalget om kryptering (14 Apr 1997) (in Danish), Report by the Expert Committee on Cryptography in Danmark (31 Jul 1997) (the same in English, April 1997)
• Licensing of Trusted Third Parties for the Provision of Encryption Services (23 Sep 1997), a mirror of the same document, (21 Mar 1997), another mirror with a survey that you can complete (30 Apr 1997), March 1997 proposal on licencing and outlawing cryptography in the UK, British and Foreign Civil Rights Organisations Oppose Encryption April 1997 Paper (01 Aug 97)
• Directive 95/46/EC of the European Parliament (10 Apr 1997) and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data
• The original Council of Europe recommendation (15 Apr 1996) from September 1995 that gave rise to this page
• Bangemann report (10 Apr 1997) is a paper published in May 1994 titled "Europe and the global information society: Recommendations to the European Council"
• National Security Regulations and the Use of Cryptography for Trans-border Communication (Feb 28 1996), a February 1996 paper from ICE-TEL project
• Paper on regulatory intent concerning use of encryption on public networks (UK) (22 Sep 1997), published in February 1997
• OECD Guidelines for Cryptography Policy (Final) March 1997 (19 Sep 1997), OECD news release (25 Sep 1997), OECD guidelines favour strong cryptography with no TTP/key escrow.
• OECD cryptography guidelines - and some comments (30 Mar 1997)
• OECD Draft Guidelines for Cryptography Policy September & December 1996 (Unknown) were a set of papers published earlier
• Description of the background of the OECD crypto process (29 Oct 1996) written in October 1996
• Legal protection for encrypted services in the internal market (Commission green paper) (24 Apr 1996) from March 1996
• Study of Legal Aspects of Digital Signatures (10 Apr 1997), call for tenders from the Commission of the European Communities (deadline has long passed - this was in 1996
• "Krypto-logisch": Die neue Versuchung im Cyberlaw (in German) (Postscript) (MS Word format) An article on the legal issues in cryptography, written in 1996
• CCTA Report on Information Superhighways (28 Mar 1996)
• The Open Information Interchange Initiative (03 Sep 1997)
• The Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies (06 Aug 1997) controls the export of cryptographic products in several European countries, Notes on Category 5 ("Telecommunications and Information Security") of Wassenaar (25 Sep 1997), a more comprehensive list of the same (29 May 97), The Wassenaar Arrangement information page (Unknown), including the text of the Arrangement
• EU export controls of dual-use goods (22 Aug 95) includes cryptography export regulations, in effect since July 1995.
• IPR and treatment of media is a paper published by EC Legal Advisory Board in April 1996, includes a paragraph on cryptography (10 Apr 1997)

Articles in the (Electronic) Press, Conference Reports

• Key escrow in Sweden (22 Sep 1997) has a myriad of links to articles online. (in Swedish) 
• Avlyssning är nödvändigt (Unknown) an article in Computer Sweden (in Swedish) 
• Inget stöd för deponering av kryptonycklar (Unknown) an article in Computer Sweden (in Swedish)
• Germany urges strong encryption (Unknown) from C|Net (July 1997)
• Nordic Post Security Service (03 Feb 1997) in CommunicationsWeek (February 1997)
• UK government policy on encryption (26 Feb 1997) (from Web Journal of Current Legal Issues)
• No Regulation of Cryptography Now (27 May 1997), Denmark for free crypto.
• Security is more than encryption (15 May 1997) and Crypto threatened by legislation (15 May 1997), two articles in Datateknik (in Swedish)
• The big brother is watching you (15 May 1997), an article on key escrow in Datavärlden (in Swedish)
• Privacy, security and commercial implications of the DTI's proposed encryption policy (16 May 1997), a conference report with RealAudio recordings
• UK Notarial Forum Response to the DTI Consultation Paper 'Licensing of Trusted Third Parties for the Provision of Encryption Services' (15 Jul 97)
• Posten sikrer data-kryptering (25 Sep 1997) An article on Nordic Post Security Service (NPSS) (in Danish)
• EU-länder förbjudna för svensk kryptoexport (29 Jan 1997), an article in Datateknik (in Swedish)
• Europe: Who Holds the Keys? (Unknown), article published in April 1996 in Byte.
• Wired (Unknown) article on Nordic Post Security Service (NPSS) and encrypted email in Sweden, Finland and Norway.
• Ingeniøren (25 Jul 1997) has several articles on crypto in Denmark. Some of these are individually linked below. (in Danish)
• Computer Sweden (Unknown) writes about key escrow and cryptography regulations (in Swedish) (January 1997)
• How about the governmental view on encryption? (01 Aug 1997) (September/December 1996)
• Helsingin Sanomat article on network security and legal status of encryption in Finland (in Finnish, restricted to subscribers only) (Jan 1997)
• @CSC (29 Mar 1996) takes a look at legal issues in encryption (in Finnish) (March 1996)
• Der Spiegel article on German crypto regulation (05 Feb 1997) (in German) (December 1996) 
• EFFector Online mentions European crypto (07 Nov 1995) (September 1995)
• OneEurope Magazine article (Unknown) on EU crypto
• Interview with David Herson - SOGIS (20 Feb 1997)
• A questionnaire targeted to decicion makers, primarily focusing on key escrow. Food for thought.
• Law, Policy, Security and Controls conference (23 Jan 1996) (October 1995)

Official Bodies, Associations, Societies, Conferences and Companies

• GCHQ Key Escrow Protocol (28 Feb 1997) 
• Protego (Unknown) is a Swedish company making hardware noise generators and cryptographic software.
• PGP Key Certification Authority (25 Sep 97) (in German)
• List of certification authorities (28 Jun 1997) in Europe and elsewhere
• DFN policy certification authority (18 Sep 97) (in German)
• Internet Publishing Services (Unknown) is a certification authority in Spain
• BelSign (09 Sep 1997) is a certification authority for Belgium and Luxemburg
• Ç-dilla Ltd. (10 Sep 1997) produce cryptographic software
• Software and Systems Engineering Limited (25 Aug 1997), a security solutions developer
• Ascom Systec (11 Sep 97) has developed the IDEA cryptosystem.
• Nordic Post Security Service (05 Sep 1997) (NPSS) is a joint effort of Finnish, Swedish, Norwegian and Danish post offices for secure electronic messaging. (in Finnish)
• EF Sverige (29 Aug 1997), Electronic Frontier Sverige, Sweden's EFF (independent of the U.S. counterpart) (in Swedish)
• TeleTrusT (Unknown) is a group of European organizations. This link points to their Swedish section which is creating a public key infrastructure for Sweden. (in Swedish/English)
• SSH Communications Security, Ltd. (25 Aug 1997) develops the Secure Shell product family.
• ARGE Daten Certification Service (26 Aug 1997) in Austria.
• CEPIS' Legal and Security Issues special interest group's cryptography policy statement (29 May 1997)
• Finnish public administration's group for data security (29 Aug 1997) (in Finnish) Contains also links to foreign sites, information on Finnish electronic ID card scheme, links to articles and memos concerning the legal status of cryptography in Finland.
• Baltimore Technologies (22 Sep 1997) is a company specializing in security and authentication.
• International Association for Cryptologic Research (09 Sep 1997) organizes for example Eurocrypt conferences.
• UCL Microelectronics Laboratory - Crypto Group (22 Sep 1997) researches electronic commerce and security. Technical reports and links to other crypto sites. They offer a list of calls for papers. (24 Sep 1997)
• The Open Group: Security and Electronic Commerce (Unknown), information on Generic Cryptographic Services and public key infrastructures
• Privacy International's pages (05 Sep 1997), international privacy rights, country-specific archives and more
• SEIS (05 Jun 1997) is an organization seeking to develop a simple, yet effective IT security framework.
• British CCTA speaks of Internet and its security precautions (14 Feb 1996)
• CPSR maintains mailing lists on these issues (01 Sep 97)
• Intelligence Online (08 Apr 97)
• Individual Network e.V. Zertifikationsinfrastruktur (03 Sep 1997) has a good FAQ on certificates and information on their PKI scheme. (in German)

Cryptographic Research, Research Papers, Technology, FAQs, Guides

• An CORDIS/EU sponsored study of TTPs and key escrow (11 Jul 97), INFOSEC EAGLE is another CORDIS sponsored study. (11 Jul 97)
• Distributed attack on RSADSI's DES challenge (14 Sep 1997), was coordinated from Sweden. However, DESCHALL was faster...
• ASPeCT (25 Apr 97) is a project evaluating security technologies for UMTS (Universal Mobile Telephone System), including trusted third parties
• A collection of papers etc. related to security and cryptography (05 Aug 1997) by R. J. Anderson
• GRECC (Groupe de Recherche en Complexité et Cryptographie) (Unknown) (In French/English)
• E.I.S.S. Textarchive Security/Crytography (30 Jun 1997) contains papers on cryptography and cryptanalysis (In English/German)
• The Royal Holloway TTP-Based Key Escrow Scheme (Postscript)
• Euro clipper (Postscript)
• A revised version of the paper that broke the 'Euro Clipper', contains details of the actual key management structure (Postscript)
• Practical invisibility in digital communications paper (19 Aug 1996)
• SESAME (Secure European System for Applications in a Multi-vendor Environment) (17 Jul 97)
• Finnish Telecommunications Association's Data Security pages (06 May 1996) Lots of information security and standardization information (in Finnish)
• ITSEC information
• The UK root of www.pgp.net (23 May 1997)
• Kryptographie FAQ (27 Aug 1997) is a German translation of RSA Cryptography Today FAQ.

The Use of Cryptography in Different Countries

• Privacy in Belgium (22 Sep 1997)
• German Federal Law to Regulate the Conditions for Information and Communications Services (IuKDG) ("Multimedia Law") (15 Sep 1997)
• Cryptography in Spain (22 Apr 1997)
• Offentliga handlingar i kryptofrågan: junienkäten (27 Apr 1997) A letter was sent to several Swedish governmental bodies asking their requirements and views of encryption. This page sums up the replies. (in Swedish)
• Some articles on encryption and key escrow (22 Sep 1997) especially in Sweden (in Swedish)
• Aktuelles zur Kryptokontroverse (Unknown) has information on the current German situation (in German)
• Links to Swedish crypto articles, information on Swedish encryption policy (01 Jun 1997)
• Germany's crypto ban case (21 Aug 1997) plus (a lot of!) relevant articles. 
• Denmark's IT security policy (20 Nov 1996) (in Danish) (November 1996)
• Denmark is a pioneer in IT security (21 Nov 1996), a press release (in Danish) (November 1996)
• UK and key escrow (02 May 1996) from EFF's archives
• Cryptography in France (21 Apr 1997) (in French)
• Articles on French cryptography regulations (23 Jul 1997) (In French/English)
• Cryptography in Germany (26 Aug 1997) (in German), Mirror of the same site (12 Sep 1997)
• Law of Electronic and Internet Commerce in Germany (Unknown)
• Cryptography in Austria (05 Nov 1996) (in German)
• Cryptography in the Netherlands (27 Jan 1997) (in Dutch) (also other links)
• Cryptography in the Netherlands (01 Nov 1996) (in English)
• Cryptography in Denmark (23 Sep 1997) (in Danish)
• Privacy in Belgium - Resource Guide (07 Aug 1997)
• Cryptography in Russia - Yeltsin's decree (17 Jul 1995), Edict of the President of the Russian Federation On Measures to Observe the Law in Development, Production, Sale and Use of Encrypting Information (13 Nov 1996)
• Russian Statutes Restricting Use of Encryption Technologies (13 Nov 1996)
• A series of articles published in Danish 'Ingeniøren' (all articles are in Danish): Free use of cryptography in Denmark (25 Sep 1997), Everyone on the Internet may get their hands on strong crypto (25 Sep 1997), Computers let everyone encrypt their telecommunications (25 Sep 1997), EU overtakes Denmark on crypto (25 Sep 1997), About France and the Net (25 Sep 1997), Danish politicians wait for expert opinions (25 Sep 1997), Still free crypto in Denmark (17 Nov 1996), Danmark kørt over i OECD (06 Nov 1996), US wants to control Danish crypto (25 Sep 1997)
• Cyber-rights and Cyber-liberties (UK) (19 Sep 97) includes a section on encryption in the UK
• Danish IT Security Council Press Release about the right for encryption (in English), also available in Postscript
• EFF archives on European/multinational crypto legislation (14 Oct 1995)
• EFF archives on key escrow in foreign countries (05 Aug 1996)
• International cryptography law survey (25 Sep 1997) by Bert-Jaap Koops, in my opinion offers the best information and is up-to-date
• Countries that regulate cryptography (05 Feb 1995) (December 1994 situation; badly expired)
• Cryptography in Europe paper (Postscript) (Might be expired)

Links to Non-European Resources

• Crypto Log (30 Mar 1996) is an excellent listing of cryptography-related links worldwide. This is worth the visit.
• Crypto Link Farm (23 Jul 1997) is another excellent collection of pointers.

Usenet Newsgroups

• sci.crypt, cryptology and cryptography as a science
• sci.crypt.research, cryptologic research
• talk.politics.crypto, political aspects of cryptography
• comp.security.pgp.announce, PGP related announcements
• alt.privacy.anon-server, anonymous remailers
• comp.org.eff.talk, Electronic Frontier Foundation's newsgroup
• comp.org.eff.news, EFF's news channel
• comp.org.cpsr.talk, CPSR's newsgroup
• sfnet.atk.turvallisuus is a Finnish IT security newsgroup

Back