NDLI: Using SEND Signature Algorithm Agility and Multiple-Key CGA to Secure Proxy Neighbor Discovery and Anycast Addressing

Content Provider	IEEE Xplore Digital Library
Author	Cheneau, T. Laurent, M.
Copyright Year	2011
Abstract	The Neighbor Discovery Protocol (NDP) is a fundamental component of the IPv6 protocol suite in charge of the Link-layer interactions (Address Resolution, Router Discovery, etc.). Over the years, it has been extended to new usages, such as Mobility (Mobile IPv6), proxy advertisements (Neighbor Discovery Proxies) and security (Secure Neighbor Discovery, SEND). However, SEND's protection is currently incompatible with two NDP functions, namely the proxy Neighbor Discovery function (used in Mobile IPv6) and the IPv6 anycast addresses (i.e. shared addresses on a same link). On one hand, Cryptographically Generated Addresses (CGA) and SEND protect the NDP messages. The former, an address generation scheme, binds a single public key to an address. The latter secures NDP messages by signing them with the corresponding private key of the source address, thus achieving a proof of address ownership. On the other hand, proxy Neighbor Discovery and IPv6 anycast addressing are mechanisms binding one address to multiple nodes. In this article, we present an overview of the existing solutions addressing these divergent objectives and tackle their limitations. We then propose an alternate solution and introduce the Multiple-Key Cryptographically Generated Addresses (MCGA) concept. This proposal relies on SEND's Signature Algorithm Agility extensions (also defined by the authors) to bind more than one Public Key to an address. As such, it enables multiple nodes to properly share and protect the same address and thus resolves proxy Neighbor Discovery and Anycast issues. Finally, we present implementation results and discuss the advantages of our approach over the existing solutions.
Starting Page	1
Ending Page	7
File Size	2775857
Page Count	7
File Format	PDF
ISBN	9781457707353
e-ISBN	9781457707377
DOI	10.1109/SAR-SSI.2011.5931376
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-05-18
Publisher Place	France
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Neodymium Public key Proposals Digital signatures
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers Using Bellare-Miner Scheme with Proxy Revocation

Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers using DSA with Proxy Revocation

Signature Algorithm Agility in the Secure Neighbor Discovery (SEND) Protocol

A Secure Proxy Signature Scheme in Bilinear Group

CS-CGA: Compact and more Secure CGA

A Survey of the SEcure Neighbor Discovery (SEND) and Multi-Key Cryptographically Generated Addresses (MCGAs)

Deploying new hash algorithms in Secure Neighbor Discovery

Multicore-based auto-scaling SEcure Neighbor Discovery for Windows operating systems

Proxy Signature Scheme Secure against Chosen Key and Chosen Warrant Attacks

Using SEND Signature Algorithm Agility and Multiple-Key CGA to Secure Proxy Neighbor Discovery and Anycast Addressing

Similar Documents

Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers Using Bellare-Miner Scheme with Proxy Revocation

Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers using DSA with Proxy Revocation

Signature Algorithm Agility in the Secure Neighbor Discovery (SEND) Protocol

A Secure Proxy Signature Scheme in Bilinear Group

CS-CGA: Compact and more Secure CGA

A Survey of the SEcure Neighbor Discovery (SEND) and Multi-Key Cryptographically Generated Addresses (MCGAs)

Deploying new hash algorithms in Secure Neighbor Discovery

Multicore-based auto-scaling SEcure Neighbor Discovery for Windows operating systems

Proxy Signature Scheme Secure against Chosen Key and Chosen Warrant Attacks

Using SEND Signature Algorithm Agility and Multiple-Key CGA to Secure Proxy Neighbor Discovery and Anycast Addressing