Computer Security (CIS-3240) Home Page

This is the home page for Peter Chapin's Computer Security course notes for the Fall 2024 semester. Here you will find electronic versions of class handouts, homework assignments, lecture slides, and links to other references of interest. If you are a student taking Computer Security, you should bookmark this page.

Lectures will be via Zoom.

The course syllabus gives an overview of the course and its content, lists course resources, and describes the grading policy and related issues.
The texts are in a curated playlist in the O'Reilly Collection. Use your VSC credentials to access it.
The homework submission area and grade book are on Canvas. All other course resources are here.
I've prepared some general information on submitting assignments.
My home page contains other resources of potential interest.

Lecture Topics

The lectures for this course will be taught via Zoom.

2024-08-26. Introduction to the course and overview of some basic concepts in computer security.
2024-08-28. Discussed general concepts of symmetric encryption. Demonstrated the hexdump and count utilities and the substitution cipher program.
2024-09-04. Introduced Feistel ciphers and DES.
2022-09-09. Discussed the AES. Introduced the One-Time Pad.
2024-09-11. Discussed the "three gnomes." Introduced block cipher modes. Discussed ECB mode, CBC mode, CFB, and CTR mode.
2024-09-16. Discussed cryptographic hash functions.
2024-09-18. Discussed GCM. Introduced public key cryptography.

Slides

Homework

Homework #1 Basic Security Concepts (DocBook source). Due: 2024-09-06
Homework #2 Block Ciphers (DocBook source). Due: 2024-09-20

Resources/Articles

General References and Utilities

RFC Index. Here you can look up any RFC or browse the RFC index itself.
Notes on hexadecimal (hex) representation of binary values.
The ASCII table on Wikipedia.
This hexdump utility is sometimes useful for looking at the raw data contained in a file (Windows executable).
A program which counts characters in a file to explore that file's statistics (Windows executable), and a program that does a simple substitution cipher (Windows executable).
A plain (ASCII) text file that is nice to use for experimentation is RFC-2616 (for the HTTP protocol).

Cryptography

A Feistel cipher is a generalized structure used by many block encryption algorithms, including DES.
The Data Encryption Standard (DES) is an older algorithm that is no longer considered secure due to its small (56-bit) key size.
The NIST FIPS 46-3 document describing DES (withdrawn).
Is DES closed? This document describes why we care.
The Meet in the Middle Attack is why double encrypting isn't worth the effort.
Blowfish is an example of a cipher that uses the Feistel network.
The Advanced Encryption Standard (AES) is a newer encryption standard that is widely used.
The NIST FIPS 197 document describing AES.
An example showing one round of the AES computation (including the initial AddRoundKey step). The program MixColumns (Windows executable) does the column mixing step of AES. It is semi-interactive.
A brief overview of some symmetric encryption algorithms.
An example of the One-Time Pad with comments about its use.
This program does a simple bitwise XOR of the plaintext against a password (Windows executable). This method is easy to break, but has a tantalizing similarity to the One-Time Pad.
A nice page about block cipher modes on Wikipedia. The page includes some excellent diagrams.
A Wikipedia page describing the SHA family of secure hash algorithms.
A Wikipedia page describing in detail the specifics of the SHA-1 algorithm (with pseudo-code).
A Wikipedia page describing the HMAC algorithm (RFC-2104)
NIST specification for Galois Counter Mode (GCM).

Security Protocols

Network Security

Host Security

Last Revised: 2024-09-19
Copyright 2024 by Peter Chapin <peter.chapin@vermontstate.edu>