Paul C. van Oorschot Boeken

Cryptography, particularly public-key cryptography, has become a crucial discipline over the past two decades, underpinning information security across various applications. Emerging standards aim to address the need for cryptographic protection in data communications. Public-key techniques are widely utilized, especially in financial services, the public sector, and for personal privacy in electronic communication. This Handbook serves as an essential reference for both novices and experts seeking comprehensive coverage in cryptography. It is a timely guide for professionals engaged in the field. The Handbook provides a multifunctional approach: it introduces practical aspects of conventional and public-key cryptography, offers the latest techniques and algorithms for serious practitioners, and presents each major topic as a self-contained unit. Additionally, it includes mathematical treatments alongside practical discussions, balancing abstraction for theoreticians with detailed implementation guidance for practitioners. Now in its third printing, this definitive reference is invaluable for developers, designers, researchers, engineers, computer scientists, and mathematicians at all levels.

This book provides a concise yet comprehensive overview of computer and Internet security, suitable for a one-term introductory course for junior/senior undergrad or first-year graduate students. It is also suitable for self-study by anyone seeking a solid footing in security – including software developers and computing professionals, technical managers and government staff. An overriding focus is on brevity, without sacrificing breadth of core topics or technical detail within them. The aim is to enable a broad understanding in roughly 350 pages. Further prioritization is supported by designating as optional selected content within this. Fundamental academic concepts are reinforced by specifics and examples, and related to applied problems and real-world incidents. The first chapter provides a gentle overview and 20 design principles for security. The ten chapters that follow provide a framework for understanding computer and Internet security. They regularly refer back to the principles, with supporting examples. These principles are the conceptual counterparts of security-related error patterns that have been recurring in software and system designs for over 50 years. The book is “elementary” in that it assumes no background in security, but unlike “soft” high-level texts it does not avoid low-level details, instead it selectively dives into fine points for exemplary topics to concretely illustrate concepts and principles. The book is rigorous in the sense of being technically sound, but avoids both mathematical proofs and lengthy source-code examples that typically make books inaccessible to general audiences. Knowledge of elementary operating system and networking concepts is helpful, but review sections summarize the essential background. For graduate students, inline exercises and supplemental references provided in per-chapter endnotes provide a bridge to further topics and a springboard to the research literature; for those in industry and government, pointers are provided to helpful surveys and relevant standards, e.g., documents from the Internet Engineering Task Force (IETF), and the U.S. National Institute of Standards and Technology.