Download presentation
Presentation is loading. Please wait.
Published byAubrey Paul Modified over 8 years ago
1
CSI WG / IETF741/12 Implementation of SeND/CGA and Extensions Beijing University of Posts and Telecommunications HUAWEI
2
CSI WG / IETF742/12 Planned SeND Basic communications based on RFC3971 Extensions based on: draft-shen-csi-ecc (algorithm agility) draft-ietf-csi-hash-threat (algorithm agility) CGA and DHCPv6 interaction Basic communications based on RFC3315 (Dibbler) Extensions based on: draft-jiang-dhc-secure-dhcpv6 (DHCPv6 and CGA interaction) draft-jiang-sendcgaext-cga-config (DHCPv6 and CGA interaction )
3
CSI WG / IETF743/12 Rough Schedule Basic design and some testing so far Hope to have some code available by IETF75
4
CSI WG / IETF744/12 Platform Host Linux* RouterQuagga over Linux* SeND *Linux Distribution Ubuntu 8.04 Kernel version 2.6.24.6 DHCPv6 Client & ServerDibbler over Linux*
5
CSI WG / IETF745/12 System view – host
6
CSI WG / IETF746/12 SEND protocol module Implementation of SEND protocol in linux kernel –Process CPS/CPA message –Process ND message with SEND options –… Compatible to all specifications in RFC3971
7
CSI WG / IETF747/12 SEND config Tool A user mode configuration tool Provide command line interface to user Dynamically configure or control the behaviors of SEND protocol: –SEND option: whether SEND is used –Ignore option: whether unsecured message is silently discarded –… Options above is declared as module parameters in kernel
8
CSI WG / IETF748/12 SEND Daemon Perform secure related computations: – generation/verification of CGA address; – storage/verification of certificate paths and trust anchors; – generation/verification of RSA/ECC signatures. –… Flexible & scalable
9
CSI WG / IETF749/12 System view – router
10
CSI WG / IETF7410/12 Router Based on Quagga over Linux –Using the same OS kernel as host –The NDP implementation in Quagga is modified to support SEND features: CPS/CPA options processing CGA/RSA/ECC options processing –…
11
CSI WG / IETF7411/12 CGA and DHCPv6 interaction Extension of DHCPv6: –Add CGA and Signature options to DHCPv6 to verify messages –Server represents CGA address and CGA parameters in the IA option to assign address to client
12
CSI WG / IETF7412/12 Comments ?
Similar presentations
© 2024 SlidePlayer.com. Inc.
All rights reserved.