Merge branch 'master' of github.com:BetterCrypto/Applied-Crypto-Hardening

[ach-master.git] / src / security.bib

diff --git a/src/security.bib b/src/security.bib
index 2665a17..9b93099 100644 (file)
--- a/src/security.bib
+++ b/src/security.bib
@@ -249,24 +249,32 @@
 
 @techreport{TR02102,
   title      = {BSI TR-02102 Kryptographische Verfahren},
-  author     = {Bundesamt f\"ur Sicherheit in der Informationstechnik (BSI)},
+  author     = {Bundesamt für Sicherheit in der Informationstechnik (BSI)},
   year       = {2013},
   month      = {Jan},
   url        = {https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02102/BSI-TR-02102_pdf}
 }
 
+@techreport{ENISA2013,
+  title      = {ENISA - Algorithms, Key Sizes and Parameters Report},
+  author     = {{ENISA and Vincent Rijmen, Nigel P. Smart, Bogdan warinschi, Gaven Watson}},
+  year       = {2013},
+  month      = {Oct},
+  url        = {http://www.enisa.europa.eu/activities/identity-and-trust/library/deliverables/algorithms-key-sizes-and-parameters-report},
+}
   
 @book{anderson2008security,
   title      = {Security engineering},
   author     = {Anderson, Ross},
   year       = {2008},
-  publisher  = {Wiley. com}
+  publisher  = {Wiley.com},
+  url        = {http://www.cl.cam.ac.uk/~rja14/book.html},
 }
 
 @misc{tschofenig-webpki,
   author = {{H. Tschofenig and E. Lear}},
   title = {{Evolving the Web Public Key Infrastructure}},
-  howpublished = {http://tools.ietf.org/html/draft-tschofenig-iab-webpki-evolution-01.txt},
+  howpublished = {\url{http://tools.ietf.org/html/draft-tschofenig-iab-webpki-evolution-01.txt}},
   year = 2013,
   month = Nov,
 }
@@ -274,7 +282,7 @@
 @misc{diginotar-hack,
   author = {{Elinor Mills}},
   title = {{Fraudulent Google certificate points to Internet attack}},
-  howpublished = {http://news.cnet.com/8301-27080\_3-20098894-245/fraudulent-google-certificate-points-to-internet-attack/},
+  howpublished = {\url{http://news.cnet.com/8301-27080\_3-20098894-245/fraudulent-google-certificate-points-to-internet-attack/}},
   year = 2011,
   month = Aug,
 }
@@ -282,28 +290,63 @@
 @misc{googlecahack,
   author = {{Damon Poeter}},
   title = {{Fake Google Certificate Puts Gmail at Risk}},
-  howpublished = {http://www.pcmag.com/article2/0,2817,2392063,00.asp},
+  howpublished = {\url{http://www.pcmag.com/article2/0,2817,2392063,00.asp}},
   year = 2011,
   month = Aug,
 }
 
-@misc{rfc6698,
-  author="P. Hoffman and J. Schlyter",
-  title="{The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA}",
-  series="Request for Comments",
-  number="6698",
-  howpublished="RFC 6698 (Proposed Standard)",
-  publisher="IETF",
-  organization="Internet Engineering Task Force",
-  year=2012,
-  month=aug,
-    url="http://www.ietf.org/rfc/rfc6698.txt",
-}
-
 @misc{draft-ietf-websec-key-pinning,
   author = {{C. Evans and C. Palmer}},
   title = {{Public Key Pinning Extension for HTTP}},
-  howpublished = {http://tools.ietf.org/html/draft-ietf-websec-key-pinning-09},
+  howpublished = {\url{http://tools.ietf.org/html/draft-ietf-websec-key-pinning-09}},
   year = 2013,
   month = Nov,
 }
+
+@misc{gocode,
+  author = {{Adam Langley, et. al.}},
+  title = {{Go X.509 Verification Source Code}},
+  howpublished = {\url{https://code.google.com/p/go/source/browse/src/pkg/crypto/x509/verify.go#173}},
+  year = 2013,
+  month = 12,
+}
+
+@misc{certtransparency,
+  author = {{Adam Langley, Ben Laurie, Emilia Kasper}},
+  title = {{Certificate Transparency}},
+  howpublished = "\url{http://www.certificate-transparency.org}
+               \url{http://datatracker.ietf.org/doc/rfc6962/}",
+  year = 2013,
+  month = 07,
+}
+
+@misc{snowdenGuardianGreenwald,
+  author = {{Glenn Greenwald}},
+  title = {{Edward Snowden: NSA whistleblower answers reader questions}},
+  howpublished = "\url{http://www.theguardian.com/world/2013/jun/17/edward-snowden-nsa-files-whistleblower},
+               \url{http://www.theguardian.com/world/2013/jun/17/edward-snowden-nsa-files-whistleblower}",
+  year = 2013,
+  month = 07,
+  day = 17,
+}
+
+@InProceedings{https13,
+       author = {Zakir Durumeric and James Kasten and Michael Bailey and J. Alex Halderman},
+       title = {Analysis of the {HTTPS} Certificate Ecosystem},
+       booktitle = {Proceedings of the 13th Internet Measurement Conference},
+       month = oct,
+       year = {2013},
+        url = {https://jhalderm.com/pub/papers/https-imc13.pdf},
+}
+
+@techreport{Wikipedia:TinyCA,
+   key       = {Wikipedia:TinyCA},
+   title     = {TinyCA},
+   institution = I_Wikipedia,
+   year      = {2013},
+   month     = Dec,
+   type      = {Wikipedia},
+   url       = {http://en.wikipedia.org/wiki/TinyCA},
+   note      = {Accessed 2013-12-24},
+}
+