Naslov
Deploying New Hash Algorithms in Secure Neighbor Discovery

Autori
Vasić, Valter ; Kukec, Ana ; Mikuc, Miljenko

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
Proceedings of the 19th International Conference on Software, Telecommunications and Computer Networks / Rožić, Nikola ; Begušić, Dinko - Split : Fakultet elektrotehnike, strojarstva i brodogradnje Sveučilišta u Splitu, 2011, S8-1

ISBN
978-953-290-027-9

Skup
Internationam Conference on Software, Telecommunications and Computer Networks 19 ; 2011)

Mjesto i datum
Dubrovnik, Hrvatska; Hvar, Hrvatska; Split, Hrvatska, 15.09.2011. - 17.09.2011

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
Secure Neighbor Discovery; Hash agility

Sažetak
IP protocol version 6 (IPv6), a successor of IP protocol version 4 (IPv4), puts a significant effort in enhancing security facilities. Secure Neighbor Discovery (SEND) is an optional IPv6 protocol that counters threats in link-local communication allowed by Neighbor Discovery protocol (NDP). It protects from attacks against the integrity and authentication capabilities, relying on trustworthiness of cryptographic hash functions. After a recent discovery of reduced hash function resistance, their efficiency has been called into question. Attacks against the collision-free property of hash functions lead to the reexamination of how Internet protocols use hashes. In the paper we contribute with analyzes of attacks on hash functions, use of hashes in SEND, impact of hash attacks on each use of hash functions in SEND, propose and evaluate possible approaches to allowing hash agility, and finally propose the most efficient solution - a solution for SEND hash agility based on a negotiation approach.

Izvorni jezik
Engleski

Znanstvena područja
Elektrotehnika, Računarstvo

POVEZANOST RADA