Real-Time and Linux Security

Author: MAIL_FSMLABS

Last updated: 17 Nov 2003

Projects

• Mario Taschwer, Virtuald
  A Wrapper for virtual server, a further development of Brian Ackermans' virtuald in his Virtual Services HOWTO. Version 2.0 uses Linux kernel capabilities, to make the chroot() environment of virtual servers secure. (GPL) virtuald-2.0.tar.bz2

Conferences

• Workshop on Cryptographic Hardware and Embedded Systems, August 13 - 15, 2002, San Francisco Bay, USA.

Links

Embedded systems security

• The Consortium for Efficient Embedded Security wants to develop a "General Specification for secure and interoperable implementations of efficient und scalable Public-Key-Methods". The Efficient Embedded Security Standard #1 specifies an implementation of NTRU Public-Key-Systems for encryption and Signature.

• Mark Eichin, Security Issues in Embedded Networking, Informations on Kerberos in Embedded Systems.

Libraries and Applications

• OpenSSL (Secure Sockets Layer)
• OpenSSH (Secure Shell)
• LSH/psst is an SSH2 implementation under GPL License.
• OSSH is an SSH1 implementation under BSD License.
  Original-Site: ftp://ftp.pdc.kth.se/pub/krypto/ossh/

IPsec

• RFC 2401 Security Architecture for the Internet Protocol (Nov 1998)
• RFC 2402 IP Authentication Header (Nov 1998)
• RFC 2104 HMAC: Keyed-Hashing for Message Authentication (Feb 1997)
• RFC 2405 The ESP DES-CBC Cipher Algorithm With Explicit IV (Nov 1998)
• RFC 2406 IP Encapsulating Security Payload (ESP) (Nov 1998)
• RFC 2407 The Internet IP Security Domain of Interpretation for ISAKMP (Nov 1998)
• RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP) (Nov 1998)
• RFC 2409 The Internet Key Exchange (IKE) (Nov 1998)

Secure protocols at the application-level

• D.L. Mills, Cryptographic authentication for real-time network protocols. In: AMS DIMACS Series in Discrete Mathematics and Theoretical Computer Science, Vol. 45 (1999), 135-144.
  PDF file available at http://www.eecis.udel.edu/~mills.

• Public key Cryptography for the Network Time Protocol (Feb 2002), stime IETF Working Group
• Syslog-Sign Protocol (Apr 2002), syslog IETF Working Group
• RFC 3195 Reliable Delivery for syslog (Nov 2001)

Security infrastructures

• RFC 3157 Securely Available Credentials - Requirements (Aug 2001)
• Securely Available Credentials Protocol (Feb 2002), sacred IETF Working Group
• Kerberized Internet Negotiation of Keys (KINK) (Oct 2001), kink IETF Working Group

APIs

• RFC 2743 Generic Security Service Application Program Interface, Version 2, Update 1 (Jan 2000)
• RFC 2847 LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM (Jun 2000)
• RFC 2025 The Simple Public-Key GSS-API Mechanism (SPKM) (Oct 1996)