Lectures notes for 2010 - KTH
Lectures notes for 2010 - KTH Lectures notes for 2010 - KTH
ESP packet Consists of: • a control header - contains a Security Parameters Index (SPI) and a sequence number field (the SPI + destination IP address unqiuely identifies the Security Association (SA)). • a data payload - encrypted version of the user’s original packet. It may also contain control information needed by the cryptographic algorithms (for example DES needs an initialization vector (IV)). • an optional authentication trailer - contains an Integrity Check Value (ICV) - which is used to validate the authenticity of the packet. ESP could use any one of several algorithms: DES, Triple DES, … See: RFC 2406: IP Encapsulating Security Payload (ESP)[2] Maguire ESP packet 12: 8 of 30 maguire@kth.se 2010.03.21 Internetworking/Internetteknik
AH header For authentication purposes only contains: • an SPI, • a sequence number, and • an authentication value. AH uses either: • Message Digest 5 (MD5) algorithm, • Secure Hash Algorithm 1 (SHA-1), • truncated HMAC (hashed message authentication code), or • … For further information see: • IP Authentication Header - RFC 2402 [3] Maguire AH header 12: 9 of 30 maguire@kth.se 2010.03.21 Internetworking/Internetteknik
- Page 707 and 708: Communication from Z to X γ Z C X
- Page 709 and 710: Identification γ Z C Y B α γ Z C
- Page 711 and 712: How did it know to send the “I am
- Page 713 and 714: Getting Service Once it’s identit
- Page 715 and 716: Alternative 1 Initially X is locate
- Page 717 and 718: Alternative 3 Initially X is locate
- Page 719 and 720: Alternative 4 continued Initially X
- Page 721 and 722: What happens in the case of wireles
- Page 723 and 724: Wireless WANs BS-a cell a BS-a cell
- Page 725 and 726: Mobile IP Standardization Effort
- Page 727 and 728: A Mobile-IP(V6) Scenario Home Agent
- Page 729 and 730: Tunneling IP Datagrams Both home ag
- Page 731 and 732: Why Agent Discovery? Agent Discover
- Page 733 and 734: Registration Message Format 0 8 16
- Page 735 and 736: FA Requirements (v4) • Each FA mu
- Page 737 and 738: Optimization Problem Home site Inte
- Page 739 and 740: Mobile IP Problems and Development
- Page 741 and 742: Wireless IP Network Architecture Ho
- Page 743 and 744: HAWAII extension is similar to Cell
- Page 745 and 746: Hierarchical FA and Regional Tunnel
- Page 747 and 748: Hierarchical FA and Regional Tunnel
- Page 749 and 750: This lecture we have discussed: •
- Page 751 and 752: IK1550 Internetworking/Internettekn
- Page 753 and 754: Private networks Private Networks a
- Page 755 and 756: Security Protocols, APIs, etc. •
- Page 757: IPSec IPSec in three parts: • enc
- Page 761 and 762: Where can you run IPSec? Mode Where
- Page 763 and 764: Linux firewall For example, for the
- Page 765 and 766: Proxy Access Through A Firewall ext
- Page 767 and 768: Newping http://ftp.cerias.purdue.ed
- Page 769 and 770: Secure Mailer (aka Postfix) Wietse
- Page 771 and 772: • TCP Wrappers - allows monitorin
- Page 773 and 774: Network Address Translation exterio
- Page 775 and 776: Network Security Exercises You will
- Page 777 and 778: This lecture we have discussed: •
- Page 779 and 780: [13] Swedish Defense Material Admin
- Page 781 and 782: IK1550 Internetworking/Internettekn
- Page 783 and 784: Generations of technology versus ge
- Page 785 and 786: Dissemination not conversation On s
- Page 787 and 788: Are interplanetary and intergalacti
- Page 789 and 790: Trends: Shifting from traditional t
- Page 791 and 792: Visualizing these laws 100 25000 80
- Page 793 and 794: Exponential growth As Ray Kurzweil
- Page 795 and 796: Is this only true for books? Chris
- Page 797 and 798: Too cheap to meter "It is not too m
- Page 799 and 800: What Would Google Do? Jeff Jarvis
- Page 801 and 802: Service Differentiation Integrated
- Page 803 and 804: Mobile ad hoc Networks (MANETs) Ad
- Page 805 and 806: PC interfaces Standard I/O ports of
- Page 807 and 808: IP Storage Area Networks (SANs) Usi
ESP packet<br />
Consists of:<br />
• a control header - contains a Security Parameters Index (SPI) and a<br />
sequence number field (the SPI + destination IP address unqiuely<br />
identifies the Security Association (SA)).<br />
• a data payload - encrypted version of the user’s original packet. It may<br />
also contain control in<strong>for</strong>mation needed by the cryptographic<br />
algorithms (<strong>for</strong> example DES needs an initialization vector (IV)).<br />
• an optional authentication trailer - contains an Integrity Check Value<br />
(ICV) - which is used to validate the authenticity of the packet.<br />
ESP could use any one of several algorithms: DES, Triple DES, …<br />
See: RFC 2406: IP Encapsulating Security Payload (ESP)[2]<br />
Maguire ESP packet 12: 8 of 30<br />
maguire@kth.se <strong>2010</strong>.03.21 Internetworking/Internetteknik
Change language