Subject: [mobile-ip] [Fwd: Using "a bit" as a protection against bidding down / for some thing else]

From: gabriel montenegro <[email-masked]>
Date: Fri, 05 Apr 2002 11:15:13 +0200

There's been a thread on IPng related to MIPv6.
We've just submitted a draft related to this thread. I attach the relevant message.

-gabriel

Subject: Re: Using "a bit" as a protection against bidding down / for some thing else
From: gabriel montenegro <[email-masked]>
To: Jari Arkko <[email-masked]>
Cc: Keith Moore <[email-masked]>, Pekka Nikander <[email-masked]>, "Hesham Soliman (ERA)" <[email-masked]>, Bob Hinden <[email-masked]>, [email-masked]
Date: Fri, 05 Apr 2002 11:11:21 +0200

Jari Arkko wrote:

> It's probably best
> to get the mentioned draft out, and deal with all the points that
> have been raised, and then get back to the issue.

I just submitted the draft:

Abstract

   Mobile IPv6 uses "return routability" to secure route optimization.
   Even after using this procedure, there are residual threats for which
   other stronger methods provide protection.  Since these are optional,
   and return routability is the default, an attacker may engage in
   "bidding down" attacks.  These attacks aim at coercing participants
   in Mobile IPv6 route optimization to forgo the stronger methods for
   the default return routability.  This document discusses what the
   participants in route optimization can do to deter or alleviate
   bidding down attacks: the "step down" procedure for the mobile node
   and the "bit method" at the correspondent node.

Before the official announcement you can also find it at:

  http://www.piuha.net/~jarkko/publications/mipv6/draft-montenegro-mipv6sec-bit-method-00.txt

tnx,

-gabriel