应用密码学

Ryean 2006-08-22 0

Crypto WiKi alike...

KONGWG 2011-08-05 0

翻译之烂，实属罕见。内容冗杂，入门尚可。

潇锻 2012-10-14 0

原谅我真心看不懂

wildpointer 2011-04-09 0

NB的书，当时老师推荐的一本。

漫天红雨 2008-10-11 0

讲述很形象，应该是这门科学本身太生涩了吧，反正我知道拿到这本书的人没有一个读完它

ThreeZhiWang 2012-12-13 0

讲的不错。但是明显深了。

luluhot 2011-03-18 0

这本书非常不错，从密钥使用场景到深入密钥算法本身都很值得一看，但是由于深入部分比较难于理解，鄙人只初略的概览了下，简单的明白一些场景和机理，推荐大家看

fuziyang 2009-02-20 0

Bruce应该是当代最出名的密码学家了，这本书毫无疑问是当代最杰出的密码学教材

alanzhang 2005-10-08 0

原著很好，可惜翻译质量不行

Ryean 2006-08-22 0

Crypto WiKi alike...

KONGWG 2011-08-05 0

翻译之烂，实属罕见。内容冗杂，入门尚可。

潇锻 2012-10-14 0

原谅我真心看不懂

wildpointer 2011-04-09 0

NB的书，当时老师推荐的一本。

漫天红雨 2008-10-11 0

讲述很形象，应该是这门科学本身太生涩了吧，反正我知道拿到这本书的人没有一个读完它

ThreeZhiWang 2012-12-13 0

讲的不错。但是明显深了。

luluhot 2011-03-18 0

这本书非常不错，从密钥使用场景到深入密钥算法本身都很值得一看，但是由于深入部分比较难于理解，鄙人只初略的概览了下，简单的明白一些场景和机理，推荐大家看

fuziyang 2009-02-20 0

Bruce应该是当代最出名的密码学家了，这本书毫无疑问是当代最杰出的密码学教材

alanzhang 2005-10-08 0

原著很好，可惜翻译质量不行

我想说两句

没有代码提供让人很残念...

伊卡洛斯 2010-01-06 2赞

这本书算是集大成者，换句话说里面的任何东西都不能真正的作为应用，虽然很尴尬。但是的确就是事实，就像把《加密与解密》看完了不可能对里面任何一个方面都了解得很细。
比如说序列密码，Hash的彩虹链，，完美信息交换这些东西只有真正的高人去研究了。

密码学的圣经

帆 2011-11-07 0赞

如果你是信息安全从业者，只选择一本书的话，那一定是“应用密码学”。
这本书详细的介绍了当前信息安全的主流协议和算法，更重要的是介绍了各种攻击手段。这本书简直就是入行必备。
在所有我读过的工具书中，这是少有的能够让人手不释卷的技术类书籍，甚至工作多年之后依然是桌面必备的工具书。

这本书评分的误导-不适合入门

皇家狗蛋 2013-11-18 4赞

这本书的作者在序言里承认，这本书的广博性取代了它的可读性。事实是这本书尽管资料齐全（在那个年代），但是可读性非常差（大量资料的堆砌而非有序讲解）。这本书更多的可以当成一本查阅的工具书，而绝对不是入门学习读物，而豆瓣的评分一向对于枯燥的工具书比较偏爱（事实编写工具书也更有难度和考验编写者的水平），所以这本书9分的得分也不足为奇。

内容有点旧

windydays 2015-01-10 4赞

内容旧了，脱离当前的密码学实用现状，
对椭圆曲线ECC一笔带过，对AES完全没有涉及，GCM模式也没有，AEAD也没有，OTR也没有。

基本上是上个世纪的密码学历史故事集。

翻译自：
http://blog.cryptographyengineering.com/2011/11/in-defense-of-applied-cryptography.html
"此书误导了一些读者，让一些读者误以为自己已经能够专业地实现密码学算法了，导致他们的商业产品充满了可怕，滑稽，破损的密码学算法。
例如一个 Diebold voting machine, circa 2003，其中的码农可悲地用了lcg作为PRNG
"

"
Unfortunately, some readers, abetted by Bruce's detailed explanations and convenient source code examples, felt that they were now ready to implement crypto professionally. Inevitably their code made its way into commercial products, which shipped full of horribly ridiculous, broken crypto implementations. This is the part that was not so good. We're probably still dealing with the blowback today.

Just for one modest example, take this fragment of code spotted in a Diebold voting machine, circa 2003:

// LCG - Linear Conguential Generator - used to generate ballot serial numbers
// A psuedo-random-sequence generator
// (per Applied Cryptography, by Bruce Schneier, Wiley, 1996)
#define LCG_MULTIPLIER 1366
#define LCG_INCREMENTOR 150889 ...
Thanks to Applied Cryptography, the Diebold coders were able to write a perfectly functional Linear Congruential Generator in no time at all. You certainly can't blame Bruce for anything here -- the LCG code is fine. It's certainly not his fault that Diebold missed the part where he warned never to use LCGs for security applications. Whoops!

Although it's all said with love, some people really do blame Applied Cryptography for this sort of thing. Even Bruce has at various points himself apologized for this aspect of the book.

(Not coincidentally, you'll notice that his more recent books are nowhere near as brazenly useful as AC. Where Practical Cryptography is all crapped up with grave warnings about the dangers of rolling your own crypto implementations, Applied Cryptography just laid it all out there sans apology, like a copy of the Anarchist Cookbook left open in a middle school library.)
"

"What's magical about Applied Cryptography is really two things.
First of all, it's an incredible historical document. If there's a cipher that was used in the period 1970-1996, you'll read about it in Applied Cryptography. Even if the cipher was based on the cryptographic equivalent of an abacus, even if it was broken in the same conference in which it was published, Bruce will still give you a full design description and the address of the guy who owns the patent.
"

信息安全专业学生必备

Boyee ZaZa 2012-05-15 1赞

对于从事信息安全工作尤其是密码学方向的，绝对是一本不可多得的入门书籍。不过真的是需要一定的数论基础才能看得下去。非常给力的书。

对于从事信息安全工作尤其是密码学方向的，绝对是一本不可多得的入门书籍。不过真的是需要一定的数论基础才能看得下去。非常给力的书。

经典！

魏理布赫 2008-07-03 7赞

这本书原书其实也不是象楼上说的那么老，95年左右吧。
我好像是2001左右买的。
密码学不光是算法，协议也许更重要！算法随着时间的过去，技术的发展，会变得过时（易破解），但是协议是相对稳定的。现在，RSA从理论上，可以在多项式复杂度内破解（量子算法，量子快速傅里叶变换）。

经典！

魏理布赫 2008-07-03 7

这本书原书其实也不是象楼上说的那么老，95年左右吧。
我好像是2001左右买的。
密码学不光是算法，协议也许更重要！算法随着时间的过去，技术的发展，会变得过时（易破解），但是协议是相对稳定的。现在，RSA从理论上，可以在多项式复杂度内破解（量子算法，量子快速傅里叶变换）。

这本书评分的误导-不适合入门

皇家狗蛋 2013-11-18 4

这本书的作者在序言里承认，这本书的广博性取代了它的可读性。事实是这本书尽管资料齐全（在那个年代），但是可读性非常差（大量资料的堆砌而非有序讲解）。这本书更多的可以当成一本查阅的工具书，而绝对不是入门学习读物，而豆瓣的评分一向对于枯燥的工具书比较偏爱（事实编写工具书也更有难度和考验编写者的水平），所以这本书9分的得分也不足为奇。

内容有点旧

windydays 2015-01-10 4

内容旧了，脱离当前的密码学实用现状，
对椭圆曲线ECC一笔带过，对AES完全没有涉及，GCM模式也没有，AEAD也没有，OTR也没有。

基本上是上个世纪的密码学历史故事集。

翻译自：
http://blog.cryptographyengineering.com/2011/11/in-defense-of-applied-cryptography.html
"此书误导了一些读者，让一些读者误以为自己已经能够专业地实现密码学算法了，导致他们的商业产品充满了可怕，滑稽，破损的密码学算法。
例如一个 Diebold voting machine, circa 2003，其中的码农可悲地用了lcg作为PRNG
"

"
Unfortunately, some readers, abetted by Bruce's detailed explanations and convenient source code examples, felt that they were now ready to implement crypto professionally. Inevitably their code made its way into commercial products, which shipped full of horribly ridiculous, broken crypto implementations. This is the part that was not so good. We're probably still dealing with the blowback today.

Just for one modest example, take this fragment of code spotted in a Diebold voting machine, circa 2003:

// LCG - Linear Conguential Generator - used to generate ballot serial numbers
// A psuedo-random-sequence generator
// (per Applied Cryptography, by Bruce Schneier, Wiley, 1996)
#define LCG_MULTIPLIER 1366
#define LCG_INCREMENTOR 150889 ...
Thanks to Applied Cryptography, the Diebold coders were able to write a perfectly functional Linear Congruential Generator in no time at all. You certainly can't blame Bruce for anything here -- the LCG code is fine. It's certainly not his fault that Diebold missed the part where he warned never to use LCGs for security applications. Whoops!

Although it's all said with love, some people really do blame Applied Cryptography for this sort of thing. Even Bruce has at various points himself apologized for this aspect of the book.

(Not coincidentally, you'll notice that his more recent books are nowhere near as brazenly useful as AC. Where Practical Cryptography is all crapped up with grave warnings about the dangers of rolling your own crypto implementations, Applied Cryptography just laid it all out there sans apology, like a copy of the Anarchist Cookbook left open in a middle school library.)
"

"What's magical about Applied Cryptography is really two things.
First of all, it's an incredible historical document. If there's a cipher that was used in the period 1970-1996, you'll read about it in Applied Cryptography. Even if the cipher was based on the cryptographic equivalent of an abacus, even if it was broken in the same conference in which it was published, Bruce will still give you a full design description and the address of the guy who owns the patent.
"

没有代码提供让人很残念...

伊卡洛斯 2010-01-06 2

这本书算是集大成者，换句话说里面的任何东西都不能真正的作为应用，虽然很尴尬。但是的确就是事实，就像把《加密与解密》看完了不可能对里面任何一个方面都了解得很细。
比如说序列密码，Hash的彩虹链，，完美信息交换这些东西只有真正的高人去研究了。

信息安全专业学生必备

Boyee ZaZa 2012-05-15 1

对于从事信息安全工作尤其是密码学方向的，绝对是一本不可多得的入门书籍。不过真的是需要一定的数论基础才能看得下去。非常给力的书。

对于从事信息安全工作尤其是密码学方向的，绝对是一本不可多得的入门书籍。不过真的是需要一定的数论基础才能看得下去。非常给力的书。

密码学的圣经

帆 2011-11-07 0

如果你是信息安全从业者，只选择一本书的话，那一定是“应用密码学”。
这本书详细的介绍了当前信息安全的主流协议和算法，更重要的是介绍了各种攻击手段。这本书简直就是入行必备。
在所有我读过的工具书中，这是少有的能够让人手不释卷的技术类书籍，甚至工作多年之后依然是桌面必备的工具书。

我要写长评

想读在读读过

标签(多个标签以“，”分开):

保存

应用密码学

推荐文章

猜你喜欢

附近的人在看

推荐阅读

拓展阅读