S7   Secure Communications over Open Networks 
Marcus J. Ranum, Network Flight Recorder, Inc.

Who should attend: Programmers, network managers, and individuals that need to develop or deploy secure communication systems. Some experience with TCP/IP and UNIX is assumed.

People increasingly rely on electronic communications as a daily part of their private lives. Corporations rely on Internet services as essential tools for their business. At the same time, many of the tools being used lack even basic protections against snooping and tampering. To make matters more interesting, governments are becoming concerned that civilian use of secure communications may threaten national security, and are pushing for various degrees of regulation.

This tutorial is intended to teach the experienced network and system manager how to build and deploy a wide range of secure communication tools. Tools are discussed within the overall context of communication security and appropriateness. Topics will range from the highly paranoid, including basic spycraft and covert channels, to the practical, such as building your own VPN router or operating PGP. We will cover actual configurations, set-up procedures, and command lines for software packages on BSD UNIX. Debugging and verifying operation will also be discussed.

Topics Include:

	The communications security environment
	Covert operations: Introductory Spycraft
	Absolute security: one-time-pads
	DES encryption
	E-Mail security: PGP
	Hiding communications: Steganography
	Virtual Private Networks: using SSH and IPSEC
	Privacy: anonymous remailers, anonymizer servers, and crowds
	Up and coming technologies
	The regulatory environment
	Where to get crypto-munitions