Abstract
This paper presents an opportunistic encryption scheme strictly layered on top of IPv6. Assuming that a node needs to send data toward another node, our proposal enables the dynamic configuration of an encrypted tunnel between the two nodes' IPsec gateways. The main contribution of this paper is to propose a solution that is fully distributed and does not rely on any global Trusted Third Party (such as DNSSEC or a PKI). The IPsec gateways are discovered using IPv6 anycast, and they derive authorization from authorization certificates and Crypto-Based Identifiers (CBIDs). The result is a robust and easily deployable opportunistic encryption service for IPv6. © Springer-Verlag Berlin Heidelberg 2004.
Author supplied keywords
Cite
CITATION STYLE
Castelluccia, C., Montenegro, G., Laganier, J., & Neumann, C. (2004). Hindering eavesdropping via IPv6 opportunistic encryption. Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 3193, 309–321. https://doi.org/10.1007/978-3-540-30108-0_19
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
