### Wish List

We want everything ... well, almost. Here's a current list of wants, there may be others:

- Hardware.
  - Oxford Hardware Compilation Group.
  - Eracom have a PCI board that David Hook is writing to.
  - nCipher have a SCSI device that JCP are writing to.

- Dr Dobbs article. Look at their author's notes. Also, there is the QuickStart notes.

- Mathematical algorithms. See for example algorithms in Chapters 2, 3, 4, 5, 14 in C from Pate Williams for the book Handbook of Applied Cryptography, Menezes, et al.

- DSA algorithm. We need the JCA algorithms for the free Java implementations that do not/can not use the JCA. So we probably also need the DSA sig algorithm. What others are in the SUN provider?

- P1363 standard. This is a new standard for public key cryptography that we want to be compatible with. Includes things like:
  - Rabin-Williams
  - elliptic curve schemes
  - OAEP encryption padding (an improvement over PKCS#1)
  - standard ASN.1 types for keys, etc.
  Their home page is here (username "P1363", password "MarsRoks").

- A course! Yes, I'd like to do an online, interactive course in applied cryptography. Something like:
  - coupled with Cryptix code: exercises, projects
  - written or guided by an academic name
  - a series of modules: number theory, cryptography, practical, protocols
  - along the style of the OU
  - assume programming and some mathematical ability.
  - exams? a certificate? a tutor mailgroup?
  Here's a list of existing meatspace courses.

- PKI - either pick up SPKI or extend Open PGP.

- PRNG - generation of random numbers. This area is always controversial, so could do with some attention:
  - analysis of random numbers generated by current methods
  - simple test programs to analyse results
  - new modules using different methods
  - documentation of issues, work done, results of analysis perhaps in a CAN.

- IPSec - whilst C IP stacks aren't really our area, there is some possibility that an all-Java kernel and IP stack will find a place in things like the NC or smart cards.

- The interesting and secure secret key algorithms in Schneier, accompanied by test and examples. E.g.,
  - GOST
  - 3-WAY
  - CA-1.1
  - FEAL
  - DESX (used by IPSec)
  - RC5
  - Snuffle :-)
  - streams: WAKE ...
  Actually, there are only a few of them left, and even the ones mentioned above have variable records.... But, there is no new edition of Schneier in the pipeline, so there is plenty of time.

- Alternative PK algorithms and packet formats: DH, ...

- Open PGP (based on pgp5.0) as it is being standardised by the open-pgp IETF group (see page for mailgroup). A working draft for the standard is in progress. Here is a page with all the Open PGP Implementors.

- Examples, documentation (CAN) for the use of Cryptix with Applets.

- PKCS certificates.

- Electronic Commerce protocols:
  - SET
  - ecash
  - SOX
  Or, do electronic commerce protocols belong elsewhere?

Opinions may differ.