[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
draft paper available
Folks on this list may be interested in a draft of a new paper of mine
entitled ``Problem Areas for the IP Security Protocols''. It outlines
some of the older attacks we've been discussing, plus a few new ones.
Here's the abstract:
The Internet Engineering Task Force (IETF) is in the process of
adopting standards for IP-layer encryption and authentication
(IPSEC). We describe a number of attacks against various
versions of these protocols, including confidentiality failures
and authentication failures. The implications of these attacks
are troubling for the utility of this entire effort.
The paper can be picked up from ftp://ftp.research.att.com/dist/smb/badesp.ps.