Securing IPv6 neighbor and router discovery

Proceedings of the Workshop on Wireless Security

Volumn , Issue , 2002, Pages 77-86

  Arkko, Jari ^a   Aura, Tuomas ^b   Kempf, James ^c   Mäntylä, Vesa Matti ^a   Nikander, Pekka ^a   Roe, Michael ^b  

^a ERICSSON RESEARCH   (Finland)

^b MICROSOFT RESEARCH   (United Kingdom)

^c DOCOMO USA LABS   (United States)

Author keywords

Autoconfiguration; Duplicate Address Detection; Identity Based Cryptosystems; Neighbor Discovery; Router Discovery

Indexed keywords

CRYPTOGRAPHY; INTERNET; LOCAL AREA NETWORKS; ROUTERS;

AUTOCONFIGURATION;

WIRELESS TELECOMMUNICATION SYSTEMS;

EID: 0036980203     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/570681.570690     Document Type: Conference Paper

References (27)

1. S. Deering and R. Hinden, Internet Protocol, Version 6 (IPv6) Specification, RFC2460, Internet Engineering Task Force, December 1998.
2. A. Conta and S. Deering, Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification, RFC2463, Internet Engineering Task Force, December 1998.
3. IEEE Draft P802.1X/D11: Standard for Port based Network Access Control, LAN MAN Standards Committee of the IEEE Computer Society, March 27, 2001.
4. IEEE Std. 802.11i/D2.0, Draft Supplement to IEEE 802.11 Standard: Specification for Enhanced Security, March 2002.
5. A. Mishra and W. A. Arbaugh, "An Initial Security Analysis of the IEEE 802.1X Standard", UMIACS-TR-2002-10, University of Maryland, February 2002.
6. R.M. Hinden and S. E. Deering. IP version 6 addressing architecture. RFC 2373, IETF Network Working Group, July 1998.
7. T. Narten, E. Nordmark and W. Simpson, Neighbor Discovery for IP Version 6 (IPv6), RFC2641, IETF, December 1998.
8. S. Thomson and T. Narten, IPv6 Stateless Address Autoconfiguration, RFC2462, Internet Engineering Task Force, December 1998.
9. T. Narten and R. Draves. Privacy extensions for stateless address autoconfiguration in IPv6. RFC 3041, IETF, January 2001.
10. J. Arkko, P. Nikander, T. Kivinen, and M. Rossi, Manual SA Configuration for IPv6 Link Local Messages, work in progress, draft-arkko-manual-icmpv6-sas-01.txt, June 2002.
11. P. Nikander, "Denial-of-Service, Address Ownership, and Early Authentication in the IPv6 World," presented at Cambridge Security Protocols Workshop 2001, April 25-27, 2001, Cambridge University.
12. P. Nikander, "A Scalable Architecture for IPv6 Address Ownership", unpublished manuscript, available at http://www.tml.hut.fi/̃pnr/publications/draft-nikander-ipng-pbk-addresses-0 0.txt, March 2001.
13. D. Thaler and J. Hagino, "IPv6 Stateless DNS Discovery", draft-ietf-ipv6-dns-discovery-04.txt, work in progress.
14. Steven Bellovin, "Security Problems in the TCP/IP Protocol Suite", Computer Communication Review, Vol. 19, No. 2, pp. 32-48, April 1989.
15. J., Kempf and E. Nordmark, "Threat Analysis for IPv6 Public Multi-Access Links," draft-kempf-netaccess-threats-00.txt,work in progress.
16. Mankin, et. al., "Threat Models introduced by Mobile IPv6 and Requirements for Security in Mobile IPv6," draft-ietf-mobileip-mipv6-scrty-reqts-01.txt, work in progress.
17. G. O'Shea and M. Roe, Child-proof authentication for MIPv6 (CAM). Computer Communications Review, April 2001.
18. G. Montenegro and C. Castellucia, "SUCV Identifiers and Addresses," draft-montenegro-sucv-02.txt, work in progress.
19. J. Kempf, C. Gentry, and A. Silverberg, "Securing IPv6 Neighbor Discovery Using Address Based Keys (ABKs)," draft-kempf-ipng-secure-nd-00.txt, work in progress.
20. A. Shamir, "Identity-Based Cryptosystems and Signature Schemes", Advances in Cryptology-Crypto'84, Lecture Notes in Computer Science 196, (1984), Springer, 47-53.
21. A. Fiat and A. Shamir, "How to prove yourself: Practical solutions to identification and signature problems", Advances in Cryptology - Crypto'86, Lecture Notes in Computer Science 263, 1986), Springer, 186-194.
22. U. Feige, A. Fiat, and A. Shamir, "Zero-knowledge Proofs of Identity", Journal of Cryptology 1, (1988), 77-94.
23. U. Maurer and Y. Yacobi, "Non-interactive public-key cryptography," Advances in Cryptology - Eurocrypt'92, Lecture Notes in Computer Science 658, (1993), Springer, 458-460.
24. D. Boneh and M. Franklin, "Identity based encryption from the Weft pairing", Advances in Cryptology - Crypto 2001, LNCS 2139, (2001), Springer, 213-229, http://www.cs.stanford.edu/̃dabo/papers/ibe.pdf
25. C. Cocks, "An identity based encryption scheme based on quadratic residues", http://www.cesg.gov.uk/technology/id-pkc/media/ciren.
26. A. Silverberg and K. Rubin, "Supersingular abelian varieties in cryptography", Cryptology e-Print Archive Report 2002/006, http://eprint.iacr.org/2002/006/, Advances in Cryptography - Crypto 2002, Springer, 2002.
27. C. Gentry and A. Silverberg, "Hierarchical ID-based Cryptography," Cryptology e-Print Archive Report 2002/056, http://eprint.iacr.org/2002/056/.