Attacking the IPsec Standards in Encryption-only Configurations
Published 1 May 2007
Jean Paul Degabriele, Kenneth G. Paterson
Citations56
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
New attacks which break any RFC- compliant implementation of IPsec making use of encryption-only ESP in tunnel mode are described, which are ciphertext-only and need only the capability to eavesdrop on ESP-encrypted traffic and to inject traffic into the network.
Abstract
We describe new attacks which break any RFC- compliant implementation of IPsec making use of encryption-only ESP in tunnel mode. The new attacks are both efficient and realistic: they are ciphertext-only and need only the capability to eavesdrop on ESP-encrypted traffic and to inject traffic into the network. We report on our experiences in applying the attacks to a variety of implementations of IPsec.
Keywords
Computer ScienceEngineering
IP Encapsulating Security Payload (ESP)
1,079 Citations1995R. Atkinson
This document describes an updated version of the Encapsulating Security Payload (ESP) protocol, which is designed to provide a mix of security services in IPv4 and IPv6.
Intercepting mobile communications
836 Citations2001Nikita Borisov, Ian Goldberg +1 more
Several serious security flaws in the Wired Equivalent Privacy protocol are discovered, stemming from mis-application of cryptographic primitives, which lead to a number of practical attacks that demonstrate that WEP fails to achieve its security goals.
Requirements for IP Version 4 Routers
456 Citations1995
This memo defines and discusses requirements for devices that perform the network layer forwarding function of the Internet protocol suite.
Lecture notes in computer scienceSecurity Flaws Induced by CBC Padding — Applications to SSL, IPSEC, WTLS...
309 Citations2002Serge Vaudenay
Various ways to perform an efficient side channel attack are shown and potential applications, extensions to other padding schemes and various ways to fix the problem are discussed.
Ipsec: The New Security Standard for the Internet, Intranets, and Virtual Private Networks
231 Citations1999Naganand Doraswamy, Dan Harkins
This book discusses the architecture, design, implementation, and use of IPSec, a suite of protocols that seemlessly integrate security into IP and provide data source authentication, data integrity, confidentiality, and protection against replay attacks.
Lecture notes in computer sciencePassword Interception in a SSL/TLS Channel
178 Citations2003Brice Canvel, Alain P. Hiltgen +2 more
Simple password authentication is often used e.g. from an email software application to a remote IMAP server, frequently done in a protected peer-to-peer tunnel, e.G. by SSL/TLS.
Columbia Academic Commons (Columbia University)Problem Areas for the IP Security Protocols
138 Citations1996Steven M. Bellovin
A number of attacks against various versions of IP-layer encryption and authentication protocols, including confidentiality failures and authentication failures are described, which are troubling for the utility of this entire effort.
ACM Transactions on Information and System SecurityBreaking and provably repairing the SSH authenticated encryption scheme
112 Citations2004Mihir Bellare, Tadayoshi Kohno +1 more
This paper proposes several fixes to the SSH protocol and, using techniques from modern cryptography, it proves that their modified versions of SSH meet strong new chosen-ciphertext privacy and integrity requirements.
Guide to IPsec VPNs
80 Citations2005Sheila E. Frankel, Karen Kent +4 more
This document focuses on how IPsec provides network layer security services and how organizations can implement IPsec and IKE to provide security under different circumstances and describes alternatives to IPsec.
IEEE Security & PrivacyLost in translation: theory and practice in cryptography
27 Citations2006Kenneth G. Paterson, Arnold K. L. Yau
The perils of using encryption without authentication or integrity protection are well known in the cryptographic research community, yet its exactly the mandatory support for unauthenticated encryption that forms the basis of a serious security flaw in an IPsec implementation the authors recently discovered.
Network and Distributed System Security SymposiumThe Perils of Unauthenticated Encryption: Kerberos Version 4.
27 Citations2004Tom Yu, Sam Hartman +1 more
An efficient chosen-plaintext attack is implemented that uses this design flaw to impersonate arbitrary principals and identify corrective measures taken in the proposed revisions of the Kerberos authentication protocol, which repair these flaws.
Initialization vector attacks on the IPsec protocol suite
18 Citations2002Christopher McCubbin, Ali Aydın Selçuk +1 more
It is shown that IV attacks can be a serious threat for IPsec if IPsec is not used carefully, and the defense methods against these attacks are discussed.