Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

I am looking for a book that describes in fair detail the most common network cryptographic protocols such as SSL, TLS, SSH, HTTPS, etc. I already have some books that cover the underlying cryptographic protocols (such as DES, AES, etc.). It's the next layer up that I am interested in learning about.

share|improve this question

closed as off topic by Mark Trapp Jan 13 '12 at 23:54

Questions on Programmers Stack Exchange are expected to relate to software development within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here. If this question can be reworded to fit the rules in the help center, please edit the question.

I recommend Cryptography Engineering as general background on implementing anything related to cryptography. You can find the definitions of specific protocols in RFCs and other standards; that's usually enough to go by. –  Gilles Jan 13 '12 at 23:50
Hi rlandster, general book recommendation questions aren't on-topic here: if you have specific questions about cryptographic protocols, feel free to ask them at our sister site, Cryptography.SE. –  user8 Jan 13 '12 at 23:55
I don't understand why this topic was closed. –  aqua Jan 14 '12 at 7:47
rfc's are always the first place to start for network protocols –  dwelch Jan 15 '12 at 15:24

1 Answer 1

Any good book on network security should cover these topics. If you really want to understand them, though, the place to go is the RFCs that document the protocol.

RFCs are where protocols become 'standards'. The IETF maintains a collection of all of the internet-drafts, RFCs, and STDs (Standards documents) it publishes. They're going to be dry, technical, and verbose (for the most part), but they are the canonical definitions of most of the standard protocols used on the internet. The other source would be IEEE specifications, but those really cover the physical and data link layers, whereas things like encryption generally occur at the transport or application layer.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.