Subject: [OPSEC] I-D ACTION:draft-ietf-opsec-routing-protocols-crypto-issues-00.txt

From: [email-masked]
Date: Wed, 22 Oct 2008 14:15:01 -0700 (PDT)

A New Internet-Draft is available from the on-line Internet-Drafts 
directories.
This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF.

	Title		: Issues with existing Cryptographic Protection Methods for Routing Protocols 
	Author(s)	: S. Hares, M. Bhatia, V. Manral, R. White
	Filename	: draft-ietf-opsec-routing-protocols-crypto-issues-00.txt
	Pages		: 16
	Date		: 2008-10-21
	
 Routing protocols are designed to use cryptographic mechanisms to 
   authenticate data being received from a neighboring router to ensure 
   that it has not been modified in transit, and actually originated 
   from the neighboring router purporting to have originating the data.  
   Most of the cryptographic mechanisms defined to date rely on hash 
   algorithms applied to the data in the routing protocol packet, which 
   means the data is transported, in the clear, along with a signature 
   based on the data itself.  These mechanisms rely on the manual 
   configuration of the keys used to seed, or build, these hash based 
   signatures.  This document outlines some of the problems with manual 
   keying of these cryptographic algorithms. 

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-opsec-routing-protocols-crypto-issues-00.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.
_______________________________________________
OPSEC mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/opsec