Hindering eavesdropping via IPv6 opportunistic encryption

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3193, Issue , 2004, Pages 309-321

  Castelluccia, Claude ^a   Montenegro, Gabriel ^b   Laganier, Julien ^b,c   Neumann, Christoph ^a  

^a INRIA RHÔNE ALPES   (France)

^b Sun Labs Europe   (France)

^c UNIVERSITÉ DE LYON   (France)

Author keywords

CBID; Delegation; IKE; IPsec; IPv6; Opportunistic Encryption; Security

Indexed keywords

CRYPTO-BASED IDENTIFIER; DELEGATION; DYNAMIC CONFIGURATION; ENCRYPTED TUNNELS; ENCRYPTION SCHEMES; IKE; IPSEC; IPV6; OPPORTUNISTIC ENCRYPTION; SECURITY;

CRYPTOGRAPHY;

EID: 19944409146     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30108-0_19     Document Type: Article

References (21)

1. Bellovin Steve, "Wiretapping the net," The Bridge, National Academy of Engineering., 2000.
2. M. Richardson and R. Redelmeier, Opportunistic Encryption unsing the Internet Key Exchange (IKE), IETF, draft-richardson-ipsec-opportunistic-13.txt, February 2004.
3. R. Arends, M. Larson, D. Massey, and S. Rose, DNS Security Introduction and Requirements, IETF, draft-ietf-dnsext-dnssec-intro-02, July 2002.
4. Gabriel Montenegro and Claude Castelluccia, "Crypto-based identifiers (CBIDs): Concepts and applications," ACM Transactions on Information and Systems Security (TISSEC), vol. 7, no. 1, February 2004.
5. D. Harkins and D. Carrel, The Internet Key Exchange (IKE), IETF, RFC2409, November 1998.
6. Michael Richardson, A Method for Storing IPsec Keying Material in DNS, IETF, draft-ietf-ipseckey-rr-09.txt, Feb 2004.
7. Steven Bellovin, "Using the domain name system for system break-ins," in Fifth Usenix UNIX Security Symposium, July 1995.
8. C. Ellison and B. Schneier, "Ten risks of PKI: What you're not being told about public key infrastructure," Computer Security Journal, vol. 16, no. 1, pp. 1-7, 2000.
9. B. Hinden and S. Deering, IP Version6 Addressing Architecture, IETF, RFC3513, April 2003.
10. B. Haberman and D. Thaler, Host-based Anycast using MLD, IETF, draft-haberman-ipngwg-host-anycast-00.txt, February 2001.
11. Greg O'Shea and Michael Roe, ""Child-proof Authentication for MIPv6 (CAM)," ACM Computer Communications Review, April 2001.
12. Tuomas Aura, "Cryptographically generated addresses (CGA)," in 6th Information Security Conference (ISC'03, Bristol, UK, October 2003, vol. 2851, pp. 29-43, LNCS.
13. C. Ellison and etc., SPKI Certificate Theory, IETF, RFC 2693, September 1999.
14. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis, The KeyNote Trust-Management System Version 2, IETF, RFC2704, September 1999.
15. S. Farrel and R. Housley, An Internet Attribute Certificate Profile for Authorization, IETF, RFC3281, April 2002.
16. C. Ellison and etc., SPKI Examples, IETF Internet Draft, Internet Draft, Available at http://world.std.com/cme/examples.txt, March 1998.
17. D. Johnson and S. Deering, Reserved IPv6 Subnet Anycast Addresses, IETF, RFC2526, March 1999.
18. Hugo Krawczyk, "SIGMA: The SIG-and-MAc approach to authenticated diffiehellman and its use in the ike protocols," in CRYPTO, Santa Barbara, August 2003.
19. R. Canetti and H. Krawczyk, "Analysis of key-exchange protocols anf their use for building secure channels," in Eurocrypt, 2001, vol. 2045.
20. C. Kaufman, Internet Key Exchange IKEv2 Protocol, IETF, draft-ietf-ipsec-ikev2-13.txt, March 2004.
21. D. McDonald, C. Metz, and B. Phan, PF-KEY Key Management API, Version 2, IETF, RFC2367, July 1998.