[EROS-Arch] Excerpts from "The Design and Verification of a Cryptographic
Security Architecture" available
Wed, 29 Nov 2000 14:20:53 -0800
Peter has designed a kernel for a cryptographic library which uses the idea
of messages to an object designated by a number (very Eros/E like) along
with a "Orange Book" like reference monitor implemented in the message logic.
It appears (from his bibliography) that he has not heard of E, Eros or KeyKOS.
The thesis includes a number of examples of Peter's sense of humor. My
favorite is using a Microsoft Word Macro Virus as an example of a Layered
>From: firstname.lastname@example.org (Peter Gutmann)
>Date: Tue, 28 Nov 2000 14:13:14 (NZDT)
>In August I finally submitted my PhD thesis, coming close to wrapping up my
>long career as a tenured graduate student. Although the work hasn't been
>accepted yet, there has been some interest expressed in portions of it so I've
>put a few chapters online. Note that these chapters represent a draft
>are not the completed work.
>The main part of the thesis, Chapters 1-5, is available from
>http://www.cs.auckland.ac.nz/~pgut001/pubs/thesis.html. These chapters
>an alternative way of building what people have been trying to do with Orange
>Book B3/A1-type systems, but in a way which is feasible and practical for an
>open source system where you don't have tens of millions of dollars and 5-10
>years available to produce a product.
>The chapters are (from the web page, where they're links to the docs):
> The software architecture, wherein the cryptlib software architecture is
> The security architecture, wherein the cryptlib security architecture is
> The kernel implementation, wherein the implementation details of the
> security kernel are examined
> Verification techniques, wherein existing methods for building secure
> are examined and found wanting
> Verification of the cryptlib kernel, wherein a new method for building a
> secure system is presented.
Bill Frantz | Microsoft Outlook, the | Periwinkle -- Consulting
(408)356-8506 | hacker's path to your | 16345 Englewood Ave.
email@example.com | hard disk. | Los Gatos, CA 95032, USA