
# SID	@(#) links.txt 1.8 22/10/10 20:00:20

# name | description
#------+----------------------------------------------------------------------+
OWASP TLS Cheat Sheet	https://www.owasp.org/index.php/Transport_Layer_Protection_Cheat_Sheet
OWASP Certificate and Public Key Pinning	https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning
OWASP HTTP Strict Transport Security	https://www.owasp.org/index.php/HTTP_Strict_Transport_Security
BEAR and LION	https://www.cl.cam.ac.uk/~rja14/Papers/bear-lion.pdf
BSI TR-02102 Teil 2	https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02102/BSI-TR-02102-2.pdf
ENISA: Algorithms, Key Sizes and Parameters Report	http://www.enisa.europa.eu/activities/identity-and-trust/library/deliverables/algorithms-key-sizes-and-parameters-report
EV Certificate	http://www.evsslcertificate.com/
EV Certificate Guidelines	https://www.cabforum.org/EV_Certificate_Guidelines.pdf
Adantium	https://eprint.iacr.org/2018/720.pdf
Adantium 	https://github.com/google/adiantum
AIA	http://www.startssl.com/certs/sub.class4.server.ca.crt
ALPN (draft)	http://tools.ietf.org/html/draft-friedl-tls-applayerprotoneg-02
ALPN 	https://www.imperialviolet.org/2013/03/20/alpn.html
CDP	http://www.startssl.com/crt4-crl.crl, http://crl.startssl.com/crt4-crl.crl
Choosen-boundary attack	http://erlend.oftedal.no/blog/beast/
CT	http://ctwatch.net/
False Start	https://www.imperialviolet.org/2012/04/11/falsestart.html
False Start 	https://technotes.googlecode.com/git/falsestart.html
HPKP	https://timtaubert.de/blog/2014/10/http-public-key-pinning-explained/
HPKP 	https://blog.pregos.info/2015/02/23/http-public-key-pinning-hpkp-erklaerung-und-einrichtung/
HPKP  	https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-key-pinning-dead
HPKP in Chrome	hrome://net-internals/#hsts    (show, reset pins in Chrome)
HSTS	http://tools.ietf.org/html/draft-hodges-strict-transport-sec-02
NaCl	http://nacl.cr.yp.to
NPN (draft)	https://tools.ietf.org/id/draft-agl-tls-nextprotoneg-04.html
NPN	https://technotes.googlecode.com/git/nextprotoneg.html
NPN 	https://www.imperialviolet.org/2013/03/20/alpn.html
OCSP	http://ocsp.startssl.com/sub/class4/server/ca
OCSP Stapling	http://en.wikipedia.org/wiki/OCSP_stapling
PFS	http://en.wikipedia.org/wiki/Perfect_forward_secrecy
Resumtion	https://www.imperialviolet.org/2011/11/22/forwardsecret.html
Resumtion	https://www.imperialviolet.org/2013/06/27/botchingpfs.html
SCSV	https://datatracker.ietf.org/doc/draft-bmoeller-tls-downgrade-scsv/?include_text=1
Security Flaws by CBC Padding	https://link.springer.com/content/pdf/10.1007/3-540-46035-7_35.pdf
Server Pinning	https://tools.ietf.org/id/draft-sheffer-tls-pinning-ticket-02.txt
SNI apache	https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
SIMON and SPECK	https://eprint.iacr.org/2013/404
SM4	https://tools.ietf.org/id/draft-crypto-sm4-00.html
Pseudo Constant Time Implementations of TLS	https://eprint.iacr.org/2018/747.pdf
LatinDances	http://cr.yp.to/rumba20/newfeatures-20071218.pdf
LatinDances2	https://eprint.iacr.org/2012/065.pdf
Poly1305_Donna	https://github.com/floodyberry/poly1305-donna
Cache-Collisions	http://research.microsoft.com/pubs/64024/aes-timing.pdf
Snuffle	https://cr.yp.to/snuffle/812.pdf
BADA55	https://bada55.cr.yp.to/
SPDY/3	http://dev.chromium.org/spdy/spdy-protocol/spdy-protocol-draft3
SPDY Protocol	http://www.chromium.org/spdy/spdy-protocol
SRI	Subresource Integrity: https://www.w3.org/TR/SRI/ 4/2016
SRI (Mozilla)	https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity
TACK	http://tack.io/draft.html, 2013 Moxie Marlinspike, Trevor Perrin
TLS Attacker	https://www.nds.ruhr-uni-bochum.de/media/nds/veroeffentlichungen/2016/10/19/tls-attacker-ccs16.pdf
TLS Lite	http://trevp.net/tlslite/
Elliptic Curve	https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations#Supported_elliptic_curves
Elliptic Curve for IPsec	https://www.researchgate.net/profile/Johannes_Merkle/publication/260050106_Standardisierung_der_Brainpool-Kurven_fur_TLS_und_IPSec/links/00b7d52f36a0cc2fdd000000.pdf
Elliptic Curve 	http://datatracker.ietf.org/doc/draft-mcgrew-tls-aes-ccm-ecc/
Elliptic Curve  	http://datatracker.ietf.org/doc/draft-merkle-tls-brainpool/
Elliptic Curve   	http://datatracker.ietf.org/doc/draft-merkle-ikev2-ke-brainpool/
Elliptic Curve    	http://datatracker.ietf.org/doc/draft-sheffer-ipsecme-dh-checks/
Elliptic Curve     	https://tools.ietf.org/html/draft-josefsson-tls-curve25519-06
Elliptic Curve     	http://eprint.iacr.org/2007/286
Elliptic Curve      	http://www.teletrust.de/fileadmin/files/oid/ecgdsa_final.pdf
Elliptic Curve       	https://datatracker.ietf.org/doc/draft-harkins-ikev3/
XMSS	https://eprint.iacr.org/2011/484.pdf

Attacks	https://tls-scanner.cs.uni-paderborn.de/wiki
3SHAKE	https://mitls.org/pages/attacks/3SHAKE
ALPACA	?
Bar Mitzvah	https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf
BEAST	https://vnhacker.blogspot.com/2011/09/beast.html https://nerdoholic.org/uploads/dergln/beast_part2/ssl_jun21.pdf
BREACH	http://www.breachattack.com/
CCS	http://ccsinjection.lepidum.co.jp/
CRIME	http://zoompf.com/2012/09/explaining-the-crime-weakness-in-spdy-and-ssl https://www.gracefulsecurity.com/crime-against-tls/
DROWN	https://drownattack.com/
EFAIL	https://efail.de/ https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-poddebniak.pdf
FREAK	https://freakattack.com/
FREAK	https://mitls.org/pages/attacks/SMACK#freak
Lucky 13	http://www.isg.rhul.ac.uk/tls/Lucky13.html
Lucky 13 Microseconds	http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.738.4741&rep=rep1&type=pdf
Lucky 13 Strickes Back	http://v.wpi.edu/wp-content/uploads/Papers/Publications/asiaccs2015_lucky.pdf
LogJam	https://weakdh.org/
NOMORE	https://www.rc4nomore.com/
POODLE	https://www.openssl.org/~bodo/ssl-poodle.pdf  https://www.imperialviolet.org/2014/10/14/poodle.html  https://www.imperialviolet.org/2014/12/08/poodleagain.html
RACCOON	?
ROCA	https://crocs.fi.muni.cz/public/papers/rsa_ccs17
ROBOT	https://robotattack.org/
SHAttered	https://shattered.io
SLOTH	https://www.mitls.org/pages/attacks/SLOTH
SKIP	https://mitls.org/pages/attacks/SMACK
SMACK	https://mitls.org/pages/attacks/SMACK  https://www.smacktls.com/
Sweet32	https://sweet32.info/  https://www.openssl.org/blog/blog/2016/08/24/sweet32/
TIME	?

# TS 102 042 : http://
    #
    #        http://rsapss.hboeck.de/rsapss-1.0.1.pdf
    #        https://www.bsi.bund.de/DE/Themen/weitereThemen/SINA/sina_node.html
    #        http://datatracker.ietf.org/doc/draft-eastlake-additional-xmlsec-uris/
# Firefox Add-ons
    #        https://calomel.org/firefox_ssl_validation.htm  Calomel SSL Validation
    #        https://addons.mozilla.org/de/firefox/addon/cert-viewer-plus/   Cert Viewer Plus
    #
    #        http://patrol.psyced.org/       Certifiate Patrol
    #        certwatch.simos.info            CertWatch
    #
