Usage and performance of cryptographically generated addresses
Résumé
Neighbor Discovery (ND) controls IPv6 nodes and routers interactions through ICMPv6 messages. It provides address resolution and duplicated address detection. Nonetheless, it does not offer security protection to the exchanged messages. In order to improve its security, Secure Neighbor Discovery (SEND) has been specied using the same ND messages and adding new options providing authentication and replay attacks control. SEND uses Cryptographically Generated Addresses (CGAs) as IPv6 addresses and RSA as key and signature generation algorithm. CGAs are created using RSA public key. In fact, they contain a cryptographic based identifier. Their interface identifier is generated using SHA-1 hash function over a parameters structure which contains the generating node's public key. Our project consists on the study of CGAs dierent usages in wired, multihoming and mobile networks. In addition, we studied CGA generation and verification algorithms performance and improve it with the use of Elliptic Curve Cryptography (ECC). We generated and conducted a set of tests to assess CGA generation performance in different platforms. Moreover, through a set of experiments, we evaluated the potential brought by ECC in cryptographic address generation
Origine | Fichiers éditeurs autorisés sur une archive ouverte |
---|
Loading...