Abstract

This paper addresses the identifier ownership problem. It does so by using characteristics of Statistic Uniqueness and Cryptographic Verifiability (SUCV) of certain entities which this document calls SUCV Identifiers and Addresses. Their characteristics allow them to severely limit certain classes of denial of service attacks and hijacking attacks. SUCV addresses are particularly applicable to solve the address ownership problem that hinders mechanisms like Binding Updates in Mobile IPv6.

Citations

2057	Handbook of Applied Cryptography - Menezes, Oorschot, et al. - 1997
410	The Resurrecting Duckling: Security Issues for Ad-Hoc Wireless Networks - Stajano, Anderson - 2000
128	An analysis of using reflectors for Distributed Denial of Service attacks - Paxson - 2001
119	Privacy Extensions for Stateless Address Autoconfiguration - Narten, Draves - 2001
114	DoS-resistant authentication with client puzzles - Aura, Nikander, et al. - 2000
86	IP version 6 addressing architecture," Request for Comments 1884 - Deering - 1995
75	The Oakley Key Determination Protocol - Orman - 1998
56	Child-proof authentication for MIPv6 - O’Shea, Roe - 2001
55	Parallel collision search with application to hash functions and discrete logarithms, in [1 - Oorschot, Wiener - 1994
38	Determining Strengths For Public Keys Used For Exchanging Symmetric Keys - Orman, Hoffman - 2004
37	Message authentication using hash functions: the hmac construction - Bellare, Canetti, et al. - 1996
28	RFC2451 The ESP CBC-Mode Cipher Algorithms - Pereira, Adams - 1998
20	The Use of HMAC-SHA-1-96 - Madson, Glenn - 1998
18	Generating RSA keys on a handheld using an untrusted server - Boneh, Modadugu, et al. - 1977
8	Threat Models introduced by Mobile IPv6 and Requirements for Security in Mobile IPv6," draft-ietf-mobileipmipv6-scrty-reqts-01.txt, a work in progress. [EAP - Mankin - 1998
6	Binding authentication key establishment protocol for Mobile IPv6 - Nikander, Perkins - 2001
6	HMAC: Keyed Hashing for Message Authentication", RFC 2104 - Krawczyk, Bellare, et al. - 1997
6	HMAC: Keyed Hashing for Message Authentication", RFC 2104 - Krawczyk, Bellare, et al. - 1997
3	Krawczyk: Message Authentication using Hash Functions - Bellare, Canetti, et al. - 1996
1	An Address Ownership Problem in IPv6", draft-nikander-ipng-address-ownership00. txt - Nikander - 2001
1	HIP Architecture", draft-ietfmoskowitz -hip-arch-02.txt - Moskowitz
1	HIP Implementation", draftmoskowitz -hip-impl-01.txt - Moskowitz
1	Host Identity Payload and Protocol ", draft-moskowitz-hip-03.txt - Moskowitz
1	A Simple Privacy Extension for Mobile IPv6," draft-castelluccia-mobileipprivacy -00.txt - Castelluccia - 2001
1	Mobile IP for IPv6 - Johnson, Perkins - 2001
1	More MODP DiffieHellman Groups for IKE", draft-ietf-ipsec-ikemodp -groups-01.txt - Kivinen, Kojo
1	Rationale for the definitions of SKEYID", message to the IPsec mailing list - Krawczyk - 2001
1	Cryptanalysis of MD5 Compress", http://www.cs.ucsd.edu/users/bsy/dobbertin.ps - Dobbertin
1	The Resurrecting Duckling: Security Issues for Ad-hoc - Stajano, Anderson - 1999
1	A Simple Privacy Extension for Mobile IPv6,” draft-castelluccia-mobileipprivacy-00.txt - Castelluccia - 2001
1	Rationale for the definitions of SKEYID”, message to the IPsec mailing list - Krawczyk - 2001