Tech Doc - Info Security

INFO SECURITY PRESENTATIONS

Encryption Working Group Presentation - July 24, 2000 (encryption072400.ppt, 667KB)
This document has been revised to correct errors in the presentation and add additional information relating to CA infrastructure addressed at the meeting.
[24 July 2000]
FIX Security Presentation (Security in FIX.ppt, 76KB)
Presentation about how FIX addresses security.
[27 June 2005]

INFO SECURITY RESOURCES

FIX Security White Paper
A white paper that includes some of the common questions and answers regarding computer and network security when using FIX.
[23 August 2007]
Global Technical Information Security Subcommittee
FPL's Global Technical Information Security Subcommittee.
PGP-DES-MD5 and PEM-DES-MD5 Implementation (pgppem.tar, 224KB)
The files included in this distribution are an implementation of the FIX security protocol. Written and contributed by Morgan Stanley in 1995 and 1996. (TAR, 224KB) [May 24, 1996]
[24 May 1996]
PGP-DES-MD5 and PEM-DES-MD5 Overview (security.doc, 25KB)
This application note addresses Authentication, Confidentiality and Integrity for data transmitted between two parties. It describes the protocol for Key Exchange, Data Encryption of selected fields in the FIX message, and Data Integrity for the entire FIX message. Written and contributed by Morgan Stanley in 1995 and 1996.
[24 May 1996]
Stunnel - Universal SSL Wrapper
Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can be used to securely wrap unencrpyted FIX traffic. The Stunnel source code is not a complete product -- you still require a functioning SSL library such as OpenSSL or SSLeay in order to compile stunnel. This means that stunnel can support whatever (and only) that which your SSL library can, without making any changes in the Stunnel code. The Stunnel source code is available under the GNU General Public License.
[8 December 2006]