2004-01-22 secpapers security http://csrc.nist.gov/publications/drafts.html http://www.rtfm.com/bugrate.pdf