IPSec hardware resource requirements evaluation

NGI 2005 - Next Generation Internet Networks: Traffic Engineering

Volumn 2005, Issue , 2005, Pages 240-246

  Ferrante, Alberto ^a   Piuri, Vincenzo ^a   Owen, Jeff ^b  

^a UNIVERSITY OF MILAN   (Italy)

^b STMicroelectronics USA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ESP PROTOCOL; HARDWARE RESOURCES; HOME SECURE GATEWAY; IPSEC HARDWARE; SECURITY MECHANISM;

ALGORITHMS; COMPUTER HARDWARE; COMPUTER NETWORKS; CRYPTOGRAPHY; DATA COMPRESSION; GATEWAYS (COMPUTER NETWORKS); SECURITY OF DATA;

NETWORK PROTOCOLS;

EID: 33744479199     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NGI.2005.1431672     Document Type: Conference Paper

References (24)

1. S. Kent and R. Atkinson, "Security Architecture For the Internet Protocol - RFC2401," IETF RFC, 1998. [Online]. Available: http://www.ietf.org/rfc.html
2. _, "IP Authentication Header - RFC2402," IETF RFC, 1998. [Online]. Available: http://www.ietf.org/rfc.html
3. _, "IP Encapsulating Security Payload (ESP) - RFC2406," IETF RFC, 1998. [Online]. Available: http://www.ietf.org/rfc.html
4. D. Harkins and D. Carrell, "The Internet Key Exchange (IKE) - RFC2409," IETF RFC, 1998. [Online]. Available: http://www.ietf.org/rfc.html
5. J. Feghhi and J. Feghhi, Secure Networking with Windows 2000 and Trust Services. Addison Wesley, 2001.
6. R. Yuan and W. T. Strayer, Virtual Private Networks. Addison Wesley, 2001.
7. S. Miltchev, S. Ioannidis, and A. D. Keromytis, "A Study Of the Relative Costs of Network Security Protocols." Monterey, CA: USENIX Annual Technical Program, June 2002.
8. S. Ariga, K. Nagahashi, M. Minami, H. Esaki, and J. Murai, "Performance Evaluation Of Data Transmission Using IPSec Over IPv6 Networks," in INET, Yokohama, Japan, July 2000.
9. Performance of FreeS/WAN. FreeS/WAN. [Online]. Available: http://www.freeswan.org/freeswan_trees/freeswan- 2.05/doc/performance.ht%ml
10. FreeS/WAN project. [Online]. Available: http://www.freeswan.org
11. Vincent Roy. (2004, 11 Oct.) Benchmarks for Native IPsec in the 2.6 Kernel. [Online]. Available: http://www.linuxjournal.com/node/7840
12. The Linux Kernel Archive. Kernel.Org Organization, Inc. [Online]. Available: http://www.kernel.org
13. Brian Buesker, Kimmo Koivisto, Bill Nottingham, Christophe Saout, and Ralf Spenneberg. IPSec-Tools. [Online]. Available: http://ipsec-tools. sourceforge.net
14. A. Shacham, R. Monsour, R. Pereira, and M. Thomas, "IP Payload Compression Protocol (IPComp) - RFC2393," IETF RFC, 1998. [Online]. Available: http://www.ietf.org/rfc.html
15. J. Ciarlante. Modular algo patches. [Online]. Available: http://ipsecaes.fase.com.br
16. R. Jones. The Netperf tool. [Online]. Available: http://www.netperf.org
17. Bash. Free Software Foundation. [Online]. Available: http://www.gnu.org/ software/bash/bash.html
18. Mendel Cooper. (2004, 3 Oct.) Advanced Bash-Scripting Guide. [Online]. Available: http://www.tldp.org/LDP/abs/html/
19. J. Fink. An overview of the proc filesystem. [Online]. Available: http://www.linuxgazette.com/issue46/fink.html
20. (1997) WAN packet size distribution. [Online]. Available: http://www.nlanr.net/NA/Learn/packetsizes.html
21. S. McCreary. Packet length distribution. [Online]. Available: http://www.caida.org/analysis/AIX/plen_hist/
22. M. A. Brown. (2003, September) Traffic control howto. [Online]. Available: http://linux-ip.net/articles/Traffic-Control-HOWTO/
23. E. P. Markatos, "Speeding up TCP/IP: Faster processors are not enough," Foundation for Research & Technology - Hellas (FORTH), Tech. Rep., 2002.
24. (2003, June) CNSS Policy No. 15, Fact Sheet No. 1 National Policy on the Use of the Advanced Encryption Standard (AES) to Protect National Security Systems and National Security Information. CNSS. [Online]. Available: http://www.nstissc.gov/Assets/pdf/fact%20sheet.pdf