Slashdot Mirror
Information On Cryptography And Effects On Society?
Plasmoid asks: "I am doing a school project on cryptography and its effects on society. I am looking for information on my topic. Any sort of information would be great(i.e. books, Web site, people, magazines, etc.). If you or someone you know can speak to me about my topic please e-mail me. I plan to cover NSA, Echelon, other misc. paranoia, current world treaties/laws and important historic events. Any help would be greatly appreciated." Now this sounds like a school project I wish I could work on. I wonder if Plasmoid would mind sharing the results when he's finished.
Skipping what part? There's a lot of stuff on the web, most of it crap. He's asking an authoritative source (the folk on slashdot) for a short list of useful material. Asking an authority on a subject for direction is a valid research technique. Why force him to wade through dozens of Cryptography for insanely stupid people books before he finds Applied Cryptography?
Many people here seem upset that this student has the internet at his disposal for doing his research, while they had to do without in their day. Get over it. Effectively using the net -- including asking known reliable people on the net for pointers -- is an essential modern research technique.
I imagine Signal 11 means the POSIX signal SIGSEGV (which causes "Segmentation fault").
/||\
RTFM.
__
(oO)
Hand me that airplane glue and I'll tell you another story.
The reason he gets moderated up is because he's funny. Can you say the same for yourself?
/||\
__
(oO)
Hand me that airplane glue and I'll tell you another story.
My advice is to read Applied Cryptography ISBN: 0471117099.
There, that wasn't so bad now was it?
-- Are you an EFF member yet?
In one future, money will become intensely private: you will not be able to tell how much anyone has, or where it came from. But you will be able to feel confident about it not being counterfiet. Money itself is only representative of goods and services. Privacy in money therefore represents privacy in all matters.
In the other possible future, it will not be possible to pay for a stick of gum without the transactioin being tracable in both space and time to the person making the transaction. Compare and contrast.
I wrote parts of this stuff
Lawrence Lessig, the expert witness called at the Microsoft trial, has published a book on the future of the Internet. It's not too tough a read. Basically, he argues that the software made for the web is it's government. He goes into the affects of cryptography on the ability to regulate the Internet. Very interesting. He's obviously a really bright guy with a lot of good ideas. It should fit your topic well.
Citizens Against Plate Tectonics
> The ensuing 'inspections' caused prominent men, like George Washington, to complain of mail tampering
Poor baby. Washington's own Federalist party was responsible for the Alien and Sedition act which likely authorized this very thing. Poetic justice methinks.
I've finally had it: until slashdot gets article moderation, I am not coming back.
The Puzzle Palace : A Report on America's Most Secret Agency by James Bamford
ISBN: 0140067485
It was written in '83, (maybe before you where born Plasmoid if your in high school), so it doesn't cover modern stuff, but there is ALOT of crypto history covered in that book which could be very helpful.
From http://www.americanpartisan.com/cols/mcelroy/10239 9.htm<P>
In 1785, a resolution authorized the secretary of the Department of
Foreign Affairs to open and inspect any mail that related to the
safety and interests of the United States. The ensuing 'inspections'
caused prominent men, like George Washington, to complain of mail
tampering. According to various historians, it led James Madison,
Thomas Jefferson and James Monroe to write to each other in code -
that is, they encrypted their letters - in order to preserve the
privacy of their political discussion.
If it's still there (it was in 5.0), the PGP documentation recounts several uses of crytography in a positive vien, such a freedom fighters, online transactions, etc. This would be a good starting point to go off an explore.
A Government Is a Body of People, Usually Notably Ungoverned
Probably not supposed to be a comprehensive list of topics there, but just in case... a brief history of PGP/PGPi would demonstrate almost all the issues you seem to intend to cover
========
<sig>Guvf vf abg n frperg zrffntr
This kid isn't asking us to do his work, he's asking for our help in getting pointed the right direction.
If he doesn't know how to find basic stuff on the web (e.g. Yahoo + Google) he needs much more than just pointers on crypto. And all this crap about a poor kid who needs help to succeed in life is pure bullshit -- it explicitly does not apply to anybody who can manage to post his schoolwork as a Slashdot news item.
Kaa
Kaa
Kaa's Law: In any sufficiently large group of people most are idiots.
Machine Cryptography and Modern Cryptanalysis, 1985, Out of Print
Cryptology: Yesterday, Today, and Tomorrow, 1987, Out of Print
Cryptology: Machines, History and Methods, 1989, Out of Print
Selections from Cryptologia: History, People and Technology, 1998
You might be able to find them in a good university library.
Aegean Park Press is another good source of historical material on cryptography.
http://www.cryptome.org
....
http://jya.com/crypto-free.htm
Learning About Cryptography
Ritter's Crypto Glossary and
Dictionary of Technical Cryptography
Encryption & Security Tutorial
N.A. Crypto Archives
International PGP site
NSA National Cryptologic Museum
EFF
attrition.org crypto archive
Bruce Schneier's Crypto-Gram
and last, but not least (the archive i developed)
PacketStorm Crypto Archives
there are lots and lots of excellent tutorials, docs, glossaries, and links to many of the great crypto sites in the world at all of the URLs above.
for the best info on NSA, ECHELON, misc paranoia, you should first check out Cryptome/JYA. i archived quite a bit of stuff related to your questions at the packetstorm site too - packetstorm.securify.com/crypt/nsa/.
feel free to email me directly if you like too. over the years, i have had some interesting experiences with the NSA, BXA, etc - primarily regarding my hosting of crypto archives, and personal investigations of NSA, ECHELON. if you want to discuss these things, get the pgp key for ken.williams@ey.com from www.keyserver.net, and send your key(s) and crypted msgs to tattooman@genocide2600.com
-- ken williams
From the Computers, Freedom and Privacy conference. The story at thee s/A24833-2000Apr6.html">Washington Post</a> had some interesting quotes.
<a href="http://www.washingtonpost.com/wp-dyn/articl
Do really dense people warp space more than others?
Get your hands on the O'Reilly book PGP: Pretty Good Privacy. Not only does it technically explain PGP, but it gives a lot of history on it. It goes into detail about the reasons Zimmerman wrote it (specifically to make a protocol we can use and the Fed can't crack), the history and ramifications of that, and a decent deal about the NSA. You will get a bit of social commentary here.
--The basis of all love is respect
Cryptonomicon is not only a great novel, but there are some interesting ideas in it about how crytography is going to shape the economy of the future. The biggest being the idea of a Data Haven, or a place, outside of the jurisdiction of major governments where people can store information and money. Kind of like the Swiss banks of old. The one's which would keep your information secret, no matter who you were.
The big problem that governments have with cryptography, specifically the U.S. government, is that it prevents the government from using some of its most powerful weapons against organized crime. It's very difficult to launder money when you cannot hide it.
The ability to decrypt messages sent by the Enigma
machine in WWII has possibly had the greatest
effect on the world today in terms on impact.
Andrew Cairncross leaked enigma decrypts from bletchly park to the KGB, and they readily acknowledge they won the largest tank battle of WWII because of it. his autobiography "the enigma spy" is available. Rommel was mainly defeated because enigma decrypts where used to pinpoint which ships where shipping fuel and ammunition to his troops to raids on convoys would have maximum effect. Almost every major victory in WWII had an enigma decrypt behind it some where. David Kahns the codebreakers is probably the best text to go to for information on the enigma itself.
"In Xanadu did Kubla Khan a stately pleasure dome decree"
-rpl
I don't have much on the USA legal stuff (but that can be found on the above sites) but for the UK, currently fighting against one of the worst "Big Brother" Violation of the right to secrecy in communications bills known in the world, the UKCrypto discussion list archive would be worth a look...
Finally, here are further links to, for example, the crypto law survey which will give you an idea of the legality of Crypto in various countries.
Good luck, and we will look forward to seeing your report if you choose to post it to the web.
--
-=DaveHowe=-
With DVDs and DMCA on the forefront, it's clear that cryptography has social ramifications that go beyond issues of security and privacy -- it's also a big technological stick companies hope to use to extract profits from consumers. Clearly this is true of the content companies (movies and audio recordings); more subtle are the motivations of the computer industry.
The computer industry players outwardly claim to want to make strong encryption available to everyone, since that is what their customers want to protect their privacy. And they don't want the hassle of multiple implementations with varying security levels and "foreign competition" (a buzzword that while theoretically true has not been substantiated with any real-life threat to revenues of the big companies complaining about it; small security-oriented companies I could sympathize with of course.) Overlooked however is the benefit that such computer companies, hardware and software, stand to gain: the ability to increase barriers to entry into their existing hardware/software markets through stronger protection of their intellectual property. The latest well-known example of this is Mattel/Learning Company's CyberPatrol encryption, but there are numerous other historic illustrations of this including Microsoft's infamous attempt to encrypt the Windows 3.1 beta error message routines indicating that DR-DOS was not supported.
Intel, for example, is already incorporating some encryption technology within their microprocessors (for currently reasonable purposes) that allows run-time modification of some of the chips' microcode for the purposes of issuing patches to bugs (e.g. the Pentium bug) on the chip. Details of this of course are only available under tightly restricted NDAs.
In the computer industry, you have to keep releasing new products to stay ahead of your competitors because they can, with time and some *legal* reverse-engineering, copy your product. Strong encryption technology built into hardware and software devices could make it practically near-impossible to perform such copying or legal reverse-engineering, thus raising even more substantial barriers to competition. Sure, protection of intellectual property is a good thing, handled reasonably well with existing legal mechanisms, (as seen by the industry's current success) but strong encryption would provide and cement a strong technological mechanism for protecting computer companies' (and others') intellectual property. The hardware or software code lying at the heart of a product can be encrypted whenever and wherever stored, and only unencrypted with the proper exchange of messages and keys.
This is a major social ramification of encryption that has remained unaddressed in the public at large, since the large computer companies (Intel, Microsoft, IBM, HP, etc.) best capable of implementing such complex mechanisms are not interested in advertising how much harder this will make the environment for their competition. Essentially, encryption greatly strengthens the technological capability of companies to arbitrarily "tie" two products together in a manner which competitors cannot substitute their product for either of the two components. While in the past, devices relied on a hard-to-copy physical interconnect to prevent copying or substitution of component parts, strong encryption enables a virtually foolproof virtual interconnect between components, and one that, unlike physical device specification, can make reverse-engineering nigh-impossible.
For example, take printer toner cartridges. If you can build build cheap, near-free encryption on both the toner cartridge and the printer, a printer designer can setup the printer to only work when a cartridge is inserted with the proper exchange of electronic encrypted messages. Because the encrypted message can involve a randomly-generated key component, an exchange-response protocol between the printer and the toner cartridge can become effectively impossible to reverse-engineer. Thus, someone who designs a printer cartridge that works in exactly the same manner physically will be prevented technologically from competing in the "printer consumables" market.
In that example, the printer cartridge is a solely physical component whose interoperability is limited solely by electronic encryption means. However, this encryption can similarly limit interoperability of computer hardware and software products in such a way that the encryption must be broken for an interoperable product to be designed.
Lest you think this concern is academic (computer companies haven't used weak encryption much, so why would they start using strong encryption now?), consider the singular difference between Microsoft's Kerberos implementation and standards-compliant ones. Microsoft fills one field with undocumented, and as I understand it, encrypted security ID information. (Better pointers to what is known about this undocumented feature appreciated.) In the name of selling you better security, the computer company sells you a self-serving product that locks you into their infrastructure and cycle of network externalities, limiting your ability to switch suppliers. (And in the case of Office2000 SR-1, it's not just a virtual network of products you have to connect with, but your system itself has to be *physically* connected to Microsoft over the Internet to register and activate their products.)
DMCA may have a loophole for interoperability purposes, but through strong encryption and techniques used in polymorphic viruses, computer companies should be able to insure that what isn't protected by law *is* protected by technology.
Remember, Bill Gates doesn't seem to think anti-trust law has any meaning or purpose in a world of software. On the contrary, it has more meaning than ever.
--LinuxParanoid, paranoid for Linux's sake
I reccomend The Code Book. It's about the evolution of cryptography from the very early and primitive Caesar cypher, through the Enigma machine, RSA, PGP, and even quantum cryptography. It's not only very informative, but an extremely enjoyable read besides.
This kid isn't asking us to do his work, he's asking for our help in getting pointed the right direction.
The way I read the request was not for a summary that could be turned into a paper, but for a recommendation for sources. I know how much time it takes to be up on everything that is going on even in a very narrow subfield. I do that for a couple of specialities where my work and hobbies both supply the motivation. And the fields for which I do it are much narrower than this. The time it would take the kid to develop enough of a background in both the math behind cryptography (which is beyond most college undergrads), and the protocols necessary to avoid compromising your security, and the legal issues surrounding cryptography is daunting. Then he would have the background to judge what are the best sources.
With that said, I have a broad, but not deep knowledge of cryptography. I would second the recommendation of Applied Cryptography. It is a good overview of the field. In particular, it was the first source I read that gave adequate treatment to protocol issues. They are mundane, boring, and absolutely essential to maintaining security. For a historic perspective of wartime use of cryptography and cryptanalysis and their impact, I suggest David Kahn's book The Codebreakers. I believe it has been updated in recent years.
The net will not be what we demand, but what we make it. Build it well.
You're forgetting the old programming axiom: Never do anything twice.
/., there will be a *really* obvious record of where his plagiarized source of info is :). So if he gets caught, he gets what he deserves.
If somebody's done the research, then I'll grab it from them. If somebody has already seperated the good stuff from the crap, then I can ignore the crap.
Granted, this case is over the top. It just smacks of "Okay, I got this project this morning, and I don't want to do any work." But I suspect that the real reason these actually get posted is not for the brat who wishes not to work, but for people like me who have a passing interest and now have a list of really good resources for crypto to read over the lunch hour.
One interesting side effect of not DingYOFM is that now that the links are posted on a public forum, should Plasmoid's teacher frequent
Is this post not nifty? Sluggy Freelance. Worshi
REUTERS, 04/07/00 -- Distributed.Net and Slashdot.Org announce Partnership. Press release claims new allies "...to explore "Massively Parallel Simian-Keyboard Output Research, with an eye towards individual education."
In an interview earlier this week, Rob Malda was quoted as saying "...and then we realized, hey, all these computers have people in front of them. I bet we could get them to do stuff too." This simple idea signalled the beginning of Distributed.Net's latest cooperative processing effort with Slashdot, tentatively named "MonkeyDo (tm)". Rave reviews have been pouring in ever since:
"I thought it was a great idea. I mean, there must be millions of people reading Slashdot right now, just sitting their drooling. All that brainpower was going completely to waste. Now, we can put all that extra thinking into solving complex and difficult problems like "how do I type 'crypto' into Google" or "how come the Dewey Decimal System at the library is so hard?"
MonkeyDo(tm) proponent Cliff, speaking alongside Hemos and CmdrTaco, said "We get millions of pageviews a day, and for the time it takes to download a page, our readers are just sitting there slack-jawed, not accomplishing anything! We decided that if we pooled their collective efforts, we could really help these kids!"
"I mean, we're not talking about a lot of brainpower, here", he added. "A tenth of an I.Q. point here, a third there. But with that many monkeys, and our innovative 'Anonymous Coward' function, we can be sure that one of them will eventually come up with the right answer!"
--
Mike Hoye
Check out the faq at RSA Labs. They have descriptions of almost all crypto stuff. Also check out Ron Rivest's Crypto links for everything on crypto.
Agreed. There is nothing wrong with going to an expert in a field and asking advice for sources, etc. The expert person is just another source of information. Getting someone else to do work for you is obviously wrong. But if someone came up to me and said, "I'm doing a paper about cryptography, where should I start learning?" I'd say, "Applied Cryptography by Bruce Schneier." What's wrong with that?
I can't agree with this sentiment in this case. The person asking the question isn't asking anybody to do his homework for him. If a student walked into a library and asked the librarian where to find some books, should the librarian tell him to 'do his own homework'? Asking people for information is a perfectly valid form of research, as long as the person writing it up cites sources appropriately. Expecting someone to do their own homework is one thing, but expecting them to work in a vacuum really isn't necessary.
When you say that your project focuses on the effect of cryptography on society, is your project more "cryptography is used in banking and in cell phones and in..." or are you more into the "cryptography is one mechanism by which privacy can be protected in this age of immediate access to information"?
Though I personally believe that the second slant is more intellectually stimulating than the first, surely you could find a banker or some other official to tell and show you how cryptography is used in their line of work. Using diverse sources in this manner you could produce a project that would be informative if only a bit dry.
If I were you, I would instead take a look at the social concequences of a society whose citizens can keep whatever information they wish out of prying eyes, even the eyes of their own government. Is this a threat to the personal safety of the many or is it the ultimate expression of freedom? The good part about this slant on the issue is that events are happening soooo fast in this area that the most pertenent and exciting information can be easily found online. What could be much more exciting or pertenent than an analysis of how recent court findings and orders can effect or have effected the current state of cryptography today? (*cough MATTEL *cough*)
Oh, yea, one more thing: working css-auth.h and css-auth.c into your project is surely worth bonus points ;).
Brandon Nuttall
I think that using the internet and using the resources on it is _not_ cheating. People are just as great a resource as some web page. Granted, people shouldn't spoon feed the answers to anyone researching a topic, especially for a school project. But what is the difference between asking a clued group of people about a topic, and looking up the sites or books about the subject? As long as the guy gathers his information and comes to his own conclusions and ideas; and presents them in a manner appropriate, people can be just as good a resource as anyone else.
You might want to read this excellent essay.
"Assume the worst about people, and you'll generally be correct"
I'd suggest Tim May's Cyphermonicon (not to be confused with Neal Stephenson's Cyrptomonicon).
-- Don't Tase me, bro!
...as too much paranoia.
The government (i.e. multinational corporations) is constantly spying on its citizens. Only the regular and widespread use of cryptography gives private citizens any hope of avoiding prying eyes.
________________________________
Back in high-school, I did a project in English about espionage and cryptography. You can talk about it until you're blue in the face, and people will just glaze over. The moment you turn on a scanner and tune into a few people's cell phone conversations, people start to understand what it's about.
It demonstrates how there's a big difference between making something illegal (social limit) and making it impractical/difficult (technical limit).
[Note: Check into the legalities of "listening" before you do it. Here in Ontario (Canada) it is (or at least was) legal to listen to anything you want - it's illegal to rebroadcast or record/use whatever you hear without consent.]
--The more you know, the less you know.
Read Bruce Schneier's Cryptogram newsletter.
Bruce Schneier's hotlinks.
Look at Cryptome. Lots of information about Echelon, the MPAA/DeCSS issue, laws, export controls...
Mach 5 cryptography archives.
Designing Secure Software.
Simson Garfinkel and Gene Spafford's book Web Security and Commerce is a very good introduction to cryptography and security issues.
For Plasmoid: the RSA FAQ us a really good place to start, esp. if you've heard a lot of crypto-talk, but gotten lost among the alphebet-soup anagrams and what-means-what. Also, although you've probably been told this a cazillion times already, Schneier's Applied Cryptography is a helluva book-- comprehensive and well written-- worth every penny. He also writes a newsletter, The Crypto-Gram. Backissues are availible at the Counterpane website. You also might want to check out newsgroups like sci.crypt.
That's all I gots for you, kidd-o. Good luck on the prog.
Much Love,
"S"HM
*****
(I refuse to spellcheck out of contempt for your belief system)
Plasmoid--
Grab some mountain dew and fire up the printer: Bruce Schneier's Crypto-Gram(http://www.counterpane.com) is possibly the most intensive and well written splashdown into the world of crypto that you're going to find.
I spent an entire evening a while back catching myself up with it--I have a binder sitting in my office that is devoted to nothing else. Bruce's book, Applied Cryptography, is an amazing piece of work(filled, incidentally, with enough humor to keep you up, but enough lucid explanations to leave your jaw dropped...the fact that I actually understand the incredibly complex digital cash protocols out there is a testament to Bruce's skill as a writer)...but his Crypto-Gram, besides being an excellent preview to the writing style you can expect, should you give a very fulfilling look at crypto past and present--everything from the basic tech to advanced concepts.
My personal suggestion would be to start with the oldest one and move forward until you hit the present. Trust me--get through those, and you'll understand alot of what's going on. It'll take you an evening, but you'll enjoy it.
Extremely high signal/noise ratio in those.
Yours Truly,
Dan Kaminsky
DoxPara Research
http://www.doxpara.com
TLA National also recognizes Mr. Gore for his accomplishments in creating a national internet for the purpose of mass-marketing and e-commerce. With these technologies, TLA National hopes to increase it's competitive offerings to you, the customer. Please note that under the terms of the DMCA you may not criticize or reverse-engineer this post. This is to ensure the lowest possible prices to you.
Fine print: Cryptography is illegal, but copyright protection mechanisms are not. Monopolies are illegal, but strategic alliances and mergers are not. Price hiking is illegal, but "competitive offerings" are not. We use the latter terminology and technology in all cases.. even though it is identical to the former, pay no attention to the double-talk... it's there for your protection afterall. What we're protecting you from, is of course protected under copyright law. Attempting to reverse-engineer this post to derive the truth is a felony and prosecutable by up to a $30,000 fine and/or 3 years in jail.
We appreciate your cooporation. -- Three Letter Acronym National
Learning how to find the sources is part of the research process in academia. Asking a public forum to find them for you should be a matter of last resort, and I sincerely doubt Plasmoid has pursued other avenues. DYOFH (Do Your Own Fucking Homework) is the standard academic equivalent to RTFM, and I think it needs to be used a lot more often. The Slashdot editors need to exercise some common sense judgement as well.
I've finally had it: until slashdot gets article moderation, I am not coming back.
It seems that Slashdot has degenerated to the level of posting school-project information requests as newsworthy items.
A brief visit to Yahoo or Google would provide tons of information to sift through. If the person asking doesn't know this, it seems a waste to time to point him anywhere.
I would advise CmdrTaco and Hemos to scan through the Titanium Cranium awards (www.fourmilab.ch) -- there they'll find many more similar items. Here is an example:
From clueless@aol.com Wed Apr 17 14:38:40 1996
Subject: Project for school
Dear sir,
I am working on a project for my trigonometry class that involves the
orbit of the earth and the orbit of Haley's Comet. The problem is to
show whether Haley's Comet will crash into the earth using trig
functions to prove my position. Can you send me information on these
orbits?
I also need information about Haley's Comet for a research paper that
is part of the project. Would you be able to help me with this?
The project was assigned just this week and is due on Friday, April
19.
Thank you very much
Kaa
Kaa
Kaa's Law: In any sufficiently large group of people most are idiots.
Funny - i just wrote an essay on that topic. It's in swedish though ;)
Anyway - some of the sources I used:
Some good sources:
The Codebreakers, David Kahn. *The* source of cryptographic stories and research up until the 60's. A must have.
Applied Cryptography, Bruce Schneier. A lot of practical advice, but also more political views.
Encyclopedia of Cryptology, David Newton - Reference work with clear explanations for the most in current and older cryptography.
The Codebook - Simon Singh. A lot easier than the above material.
and finally some links:
http://www.hack.gr/users/dij/crypto/
http://www.rsa.com
http://www.eskimo.com/~weidai/algorithms.html
Hey Plasmoid,
I did a little work in this area in school as well. I agree with an earlier poster that the resources are out there and you should draw your own conclusions. The paper I wrote focused on the influence of the NSA with the development of DES and the growth of the nascent crypto community. I think I can help you by giving you a bibliography:
Bamford, James. The Puzzle Palace. Penguin Books Ltd., Middlesex England. 1983.
Brankstand, D.K. et al. "Report on the Workshop on Cryptography in Support of Computer Security." NBSIR 77-1291, National Bureau of Standards, Sep 21-22, 1976, September 1977.
Coppersmith, D. "The Data Encryption Standard (DES) and its strength against attacks." IBM Journal of Research and Development. V. 38, N. 3. May 1994. 243-250.
Denning, Peter J. "Government Classification of Private Ideas." Communications of the ACM. March 1981. 105.
"Encryption Technology, Privacy, and National Security." Technology Review. August September 1986. [get author and page number]
Foerstel, Herbert N. Secret Science: Federal Control of American Science and Technology. Praeger Publishers, Westport CT. 1993.
"The Government's Classification of Private Ideas". Hearings, 96th Congress, February 28, March 21, August 1980. (Washington, DC: U.S. GPO, 1981), 271.
Kinnucan, Paul. "Data Encryption Gurus: Tuchman and Meyer." Cryptologia. V.2 N 4. October 1978. 371-382.
Kolata, Gina Bari. "Cryptography: A New Clash Between Academic Freedom and National Security". Science. August 29th, 1980. 995-996.
Massey, J.L. "An Introduction to Contemporary Cryptology." Proceedings of the IEEE. V. 76, N. 5. May 1988. 533-549.
Schneier, Bruce. Applied Cryptography. John Wiley & Sons, Inc. New York, New York. 1996.
Shapley, Deborah and Kolata, Gina Bari. "Cryptology: Scientists Puzzle over Threat to Open Research, Publication." Science. September 30, 1977. 1345-46.
Shaker, Richard. "The Agency that came in from the Cold: exceprts from an address at the Joint Mathematics Meeting in Baltimore on January 8, 1992." Notices of the American Mathematical Society. V. 39, N. 5. May 1, 1992. 408-411.
U.S. Senate Select Committee on Intelligence. "Unclassified Summary: Involvement of the NSA in the development of the Data Encryption Standard." Cryptologia. October 1978, pp 387-389.