From 6937aa9ec2e0aa85ea339a42714fb6900e013e4c Mon Sep 17 00:00:00 2001 From: Nouri-Alnahawi <nouri.alnahawi@h-da.de> Date: Wed, 7 Jul 2021 15:06:57 +0200 Subject: [PATCH] update security protocols --- content/_index.html | 8 +++- content/docs/libraries.md | 3 ++ content/docs/migration/protocols/_index.md | 54 +++++++++++----------- content/docs/projects.md | 3 ++ 4 files changed, 41 insertions(+), 27 deletions(-) diff --git a/content/_index.html b/content/_index.html index fc2f684..e6ba8eb 100644 --- a/content/_index.html +++ b/content/_index.html @@ -6,6 +6,7 @@ linkTitle = "Cryptographic Migration & Agility" {{< blocks/cover title="Cryptographic Migration & Agility" image_anchor="top" height="full" color="dark" >}} <div class="mx-auto"> + <p class="display-4">An open community site for sharing any relevant research, findings, and solutions on PQC migration and cryptographic agility</p> <a class="btn btn-lg btn-light mr-3 mb-4" href="{{< relref "/docs" >}}"> Content <i class="fas fa-arrow-alt-circle-right ml-2"></i> @@ -13,7 +14,12 @@ linkTitle = "Cryptographic Migration & Agility" <a class="btn btn-lg btn-dark mr-3 mb-4" href="https://arxiv.org/abs/2106.09599"> Original Paper <i class="fas fa-book ml-2 "></i> </a> - <p class="display-4">An open community site for sharing any relevant research, findings, and solutions on PQC migration and cryptographic agility.</p> + <p class="display-4"> Sister Project <br><br> + <a class="btn btn-lg btn-primary mr-3 mb-4" href="https://cspub.h-da.io/pqc/"> + PQC Integration + <i class="fas fa-arrow-alt-circle-right ml-2"></i> + </a> + </p> {{< blocks/link-down color="white" >}} </div> {{< /blocks/cover >}} diff --git a/content/docs/libraries.md b/content/docs/libraries.md index 0718a34..0579618 100644 --- a/content/docs/libraries.md +++ b/content/docs/libraries.md @@ -28,3 +28,6 @@ Lightweight crypto library for constrained environments. Development of cryptography API proposals for the WASI Subgroup of the [WebAssembly Community Group](https://www.w3.org/community/webassembly/) - [Botan: Crypto and TLS for Modern C++](https://botan.randombit.net/) A C++ cryptographic library implementing a range of practical systems, such as TLS protocol, X.509 certificates, modern AEAD ciphers, PKCS#11 and TPM hardware support, password hashing, and post quantum crypto schemes. Several other language bindings are available, including Python. Versions of Botan that are approved by the BSI can be found on the [Github repository](https://github.com/Rohde-Schwarz/botan) + +- [eUCRITE API](https://cspub.h-da.io/eucrite/): +(Usable Cryptographic Interface) is a crypto API that places special emphasis on usability and security. Developed by the Applied Cyber-Security and User-Centered Security research groups at Darmstadt University of Applied Sciences. diff --git a/content/docs/migration/protocols/_index.md b/content/docs/migration/protocols/_index.md index 044316c..518a1ed 100644 --- a/content/docs/migration/protocols/_index.md +++ b/content/docs/migration/protocols/_index.md @@ -5,45 +5,47 @@ draft: false weight: 2 layout: no_index --- -##### Key Exchange, Establishment, and Encapsulation -- [TLS/SSL]({{< ref "/tls" >}} "TLS/SSL") -- [SSH]({{< ref "/ssh" >}} "SSH") -- [IPsec/IKE]({{< ref "/ike" >}} "IPsec/IKE") -- [MACsec]({{< ref "/macsec" >}} "MACsec") -- [DTLS]({{< ref "/dtls" >}} "DTLS") - -##### Authentication & Signing -- [CMS]({{< ref "/cms" >}} "CMS") -- [S/MIME]({{< ref "/smime" >}} "S/MIME") -- [PGP/GPG]({{< ref "/pgp" >}} "PGP/GPG") -- [OPC UA]({{< ref "/opcua" >}} "OPC UA") -- OAuth +An overview of the existing communication and security protocols that make use of cryptographic systems and cipher suites, and their current state of PQC integration. The classification is based on the OSI model. -##### Certification -- [DNSSEC]({{< ref "/dnssec" >}} "DNSSEC") -- [X.509]({{< ref "/certs" >}} "X.509") - -##### Wireless +##### Data Link (Layer 2) +- [MACsec]({{< ref "/macsec" >}} "MACsec") +- PPP CHAP/PAP - [WPA/EAP]({{< ref "/wlan" >}} "WPA/EAP") - UMTTS/LTE/5G - Bluetooth/IR/ZigBee - WSN -##### End-to-End +##### Network (Layer 3) +- [IPsec/IKE]({{< ref "/ike" >}} "IPsec/IKE") - [VPN]({{< ref "/vpn" >}} "VPN") - [WireGuard]({{< ref "/wireguard" >}} "WireGuard") -- SFTP -- Telnet - -##### Others - [DLT]({{< ref "/dlt" >}} "DLT") -- [PKINIT]({{< ref "/pkinit" >}} "PKINIT") +- GRE + +##### Transport (Layer 4) +- [TLS/SSL]({{< ref "/tls" >}} "TLS/SSL") +- [DTLS]({{< ref "/dtls" >}} "DTLS") - SRTP/ZRTP - QUIC -- PPP CHAP/PAP - PCT + +##### Session (Layer 5) +- [PGP/GPG]({{< ref "/pgp" >}} "PGP/GPG") + +##### Application (Layer 7) +- [SSH]({{< ref "/ssh" >}} "SSH") +- [DNSSEC]({{< ref "/dnssec" >}} "DNSSEC") +- [X.509]({{< ref "/certs" >}} "X.509") +- [CMS]({{< ref "/cms" >}} "CMS") +- [S/MIME]({{< ref "/smime" >}} "S/MIME") +- [Kerberos/PKINIT]({{< ref "/pkinit" >}} "Kerberos/PKINIT") +- OAuth +- [OPC UA]({{< ref "/opcua" >}} "OPC UA") +- SFTP + +##### Others - SET -- GRE - S-RPC - FinTS/HBCI - PKCS +- Telnet diff --git a/content/docs/projects.md b/content/docs/projects.md index 0305841..094b9bd 100644 --- a/content/docs/projects.md +++ b/content/docs/projects.md @@ -22,3 +22,6 @@ Next Generation Cryptography for Embedded Systems. Secure Integration of Cryptographic Software. - [BSI-Project: Secure Implementation of a Universal Crypto Library](https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Kryptografie/Kryptobibliothek-Botan/kryptobibliothek-botan_node.html) More information (in German language) can be found in the [project summary](https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Krypto/Projektzusammenfassung_Botan.pdf) + +- [PQC Integration](https://cspub.h-da.io/pqc/): +PQC integration projects initiated by the research groups for Applied Cyber-Security and User-Centered Security at Darmstadt University of Applied Sciences. -- GitLab