-
RFCs and internet drafts:
- The IETF Security Area and related IETF working groups
- PKIX: Public Key Infrastructure (X.509)
-
- RFC 2459: "Certificate and CRL Profile"
- RFC 2510: "Certificate Management Protocols"
- RFC 2511: "Certificate Request Message Format"
- RFC 2527: "Certificate Policy and Certification Practices Framework"
- RFC 2528: "Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates"
- RFC 2559: "Operational Protocols - LDAPv2"
- RFC 2560: "Online Certificate Status Protocol - OCSP"
- RFC 2585: "Operational Protocols - FTP and HTTP"
- RFC 2587: "LDAPv2 Schema"
- RFC 2797: "Certificate Management Messages over CMS"
- RFC 2875: "Diffie-Hellman Proof-of-Possession Algorithms"
- RFC 4387: "Operational Protocols: Certificate Store Access via HTTP"
- RFC 4476: "Attribute Certificate (AC) Policies Extension"
- RFC 4491: "Using the GOST 28147-89, GOST R 34.11-94, GOST R 34.10-94, and GOST R 34.10-2001 Algorithms with PKIX"
- RFC 4630: "Update to DirectoryString Processing in the PKIX Certificate and Certificate Revocation List (CRL) Profile"
- RFC 4683: "Subject Identification Method (SIM)"
- S/MIME: S/MIME Mail Security
-
- RFC 2311: "S/MIME Version 2 Message Specification"
- RFC 2312: "S/MIME Version 2 Certificate Handling"
- RFC 2630: "Cryptographic Message Syntax"
- RFC 2631: "Diffie-Hellman Key Agreement Method"
- RFC 2632: "S/MIME Version 3 Certificate Handling"
- RFC 2633: "S/MIME Version 3 Message Specification"
- RFC 2634: "Enhanced Security Services for S/MIME"
- RFC 2785: "Methods for Avoiding the 'Small-Subgroup' Attacks on the Diffie-Hellman Key Agreement Method for S/MIME"
- RFC 2876: "Use of the KEA and SKIPJACK Algorithms in CMS"
- RFC 3851: "S/MIME Version 3.1 Certificate Message Specification"
- RFC 3852: "Cryptographic Message Syntax (CMS)"
- RFC 3854: "Securing X.400 Content with S/MIME"
- RFC 3855: "Transporting S/MIME Objects in X.400"
- RFC 4010: "Use of the SEED Encryption Algorithm in Cryptographic Message Syntax (CMS)"
- RFC 4056: "Use of the RSASSA-PSS Signature Algorithm in Cryptographic Message Syntax (CMS)"
- RFC 4134: "Examples of S/MIME Messages"
- RFC 4262: "X.509 Certificate Extension for Secure/Multipurpose Internet Mail Extensions (S/MIME) Capabilities"
- RFC 4490: "Using the GOST 28147-89, GOST R 34.11-94, GOST R 34.10-94, and GOST R 34.10-2001 Algorithms with Cryptographic Message Syntax (CMS)"
- RFC 4853: "Cryptographic Message Syntax (CMS) Multiple Signer Clarification"
- TLS: Transport Layer Security
-
- RFC 2246: "The TLS Protocol Version 1.0"
- RFC 2712: "Addition of Kerberos Cipher Suites to TLS"
- RFC 2817: "Upgrading to TLS Within HTTP/1.1"
- RFC 2818: "HTTP Over TLS"
- RFC 2830: "LDAP v3: Extension for Transport Layer Security"
- RFC 3268: "Advanced Encryption Standard (AES) Ciphersuites for Transport Layer Security (TLS)"
- RFC 3546: "Transport Layer Security (TLS) Extensions"
- RFC 3749: "Transport Layer Security Protocol Compression Methods"
- RFC 4132: "Addition of Camellia Cipher Suites to Transport Layer Security (TLS)"
- RFC 4261: "Common Open Policy Service (COPS) Over Transport Layer Security (TLS)"
- RFC 4279: "Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"
- RFC 4346: "The Transport Layer Security (TLS) Protocol Version 1.1"
- RFC 4366: "Transport Layer Security (TLS) Extensions"
- RFC 4492: "Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS)"
- RFC 4507: "Transport Layer Security (TLS) Session Resumption without Server-Side State"
- RFC 4642: "Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP)"
- RFC 4680: "TLS Handshake Message for Supplemental Data"
- RFC 4681: "TLS User Mapping Extension"
- RFC 4785: "Pre-Shared Key (PSK) Ciphersuites with NULL Encryption
for TLS"
- SPKI: Simple Public Key Infrastructure (Note: WG has concluded)
- OpenPGP: An Open Specification for Pretty Good Privacy
- IETF/W3C XML Signature WG
- IPSEC: IP Security Protocol
- IPSRA: IP Security Remote Access
- The venerable PEM specification:
- RFC 1421 --- ASCII --- PostScript (195 KB)
- RFC 1422 --- ASCII --- PostScript (156 KB)
- RFC 1423 --- ASCII --- PostScript (76 KB)
- RFC 1424 --- ASCII --- PostScript (46 KB)
- RFC 1847: "Security Multiparts for MIME"
- RFC 1848: "MIME Object Security Services (MOSS)"
- RFC 2015: "MIME Security with Pretty Good Privacy (PGP)"
- RFC 2480: "Gateways and MIME Security Multiparts"
- RFC 3156: "MIME Security with OpenPGP"
- RFC 3174: "US Secure Hash Algorithm 1 (SHA1)"
- RFC 4523: "Lightweight Directory Access Protocol (LDAP) Schema Definitions
for X.509 Certificates"
Miscellaneous PKI and Security stuff:
- TERENA's Security Working Group: WG-SEC
- UKERNA Technology Group Secure Email Project Homepage
- About the Digital Notary Service
- MMMSec: Security in Multimedia - Mail
- Internet Law & Policy Forum (ILPF): CA Working Group
- SPKI: Simple Public Key Infrastrucure (Carl Ellison)
- Electronic Commerce Promotion Council (Japan)
- INFOSEC page from DGXIII of the European Commission
- Meta-Certificate Group
- University of Colorado Certification Practices Statement (DRAFT)
- The Global Trust Register (University of Cambridge)
- Certificate Authority Interoperability Pilot (Internet Council)
- Fortify for Netscape!
- European Certification Authority Forum (ECAF)
- "PKI Architecture" - Network Strategy Report by The Burton Group
- PKI Task Group (Open Group)
- Netscape Object Signing Resources
- Internet2 PKI Labs
- Healthcare PKI
- vpnlabs.org
- vpnlabs.com
- SSTC: XML-Based Security Services Technical Committee (OASIS)
- xmltrustcenter.org
- pkilaw.com
- SigLab (note: German language!)
- A bridge CA for Europe's public administrations
- Questionnaire on Public Key Infrastructure applications and requirements for the European Academic Networks
- X.509 path validation test suite (NIST)
- PKI Club
- FreeICP Project
- PKICUG (PKI for Closed User Groups)
- Challenge PKI Project
- PKI Interoperability Project (Japan PKI Forum)
- Chinese PKI Forum (note: Chinese language!)
- Asia PKI Forum
- Foro PKI de Mexico (note: Spanish language!)
- Norwegian PKI Forum (note: Norwegian language!)
- SPES project: Setting the Processes for electronic signatures in European cities
- ECRYPT project: European Network of Excellence for Cryptology
- Z1 Global TrustPoint
- AuthenticationWorld