From: Adam Shostack <adam@lighthouse.homeport.org>
Date: Fri, 16 Feb 1996 03:21:42 +0800
To: scmayo@rsc.anu.edu.au (Sherry Mayo)
Subject: Re: A good cryptanalysis text?
In-Reply-To: <9602150103.AA22683@toad.com>
Message-ID: <199602151438.JAA28463@homeport.org>
MIME-Version: 1.0
Content-Type: text


Sherry Mayo wrote:

| > A friend of mine is looking for a good introductory cryptanalysis
| > text. Does Schneier's book cover this in much depth or is it more
| > cryptography as the name implies.
| > 
| > My friend is a computer networking admin who is trying to widen
| > his background knowledge of security related issues (this may
| > mean that a more computing oriented intro is more suitable).

My single favorite work is by Ross Anderson.  His paper 'Why
Cryptosystems Fail' is excellent, and unknown for reasons that are not
clear to me.  Perhaps its because he diesn't spend all his time
telling the media how wonderful he is. ;)

Next would be Cheswick & Bellovin.  Both are very smart guys, and they
talk a lot about the philosophy of security.  They have a book
'Firewalls and Internet security,' and both have authored many papers.


Adam



-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume