[IPsec] New Draft Version: Diet-ESP

"Tobias Guggemos" <tobias.guggemos@stud.ifi.lmu.de> Tue, 04 March 2014 11:35 UTC

From: Tobias Guggemos <tobias.guggemos@stud.ifi.lmu.de>
To: ipsec@ietf.org, lwip@ietf.org
Date: Tue, 04 Mar 2014 11:35:36 -0000
Message-ID: <012001cf379d$ddc4f760$994ee620$@stud.ifi.lmu.de>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0121_01CF379D.DDC71A40"
Thread-Index: Ac83nVrWJjL0rRg9Tq6qFucLAUi7PQ==
Content-Language: de
Archived-At: http://mailarchive.ietf.org/arch/msg/ipsec/m0sef72ZW5s33vB_22FSYcPLRIg
Subject: [IPsec] New Draft Version: Diet-ESP
Precedence: list

Hi all, 

Please find a draft we have just posted. It is updated with some of the
comments from the mailinglist and moved from dice to ipsecme WG.


Comments are welcome,

 

 

A new version of I-D, draft-mglt-ipsecme-diet-esp-00.txt

has been successfully submitted by Tobias Guggemos and posted to the IETF
repository.

 

Name:                 draft-mglt-ipsecme-diet-esp

Revision:             00

Title:                    Diet-ESP: a flexible and compressed format for
IPsec/ESP

Document date:               2014-03-03

Group:                 Individual Submission

Pages:                  26

URL:
<http://www.ietf.org/internet-drafts/draft-mglt-ipsecme-diet-esp-00.txt>
http://www.ietf.org/internet-drafts/draft-mglt-ipsecme-diet-esp-00.txt

Status:
<https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/>
https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/

Htmlized:        <http://tools.ietf.org/html/draft-mglt-ipsecme-diet-esp-00>
http://tools.ietf.org/html/draft-mglt-ipsecme-diet-esp-00

 

 

Abstract:

   IPsec/ESP has been designed to secure IP packets exchanged between

   two nodes.  IPsec implements security at the IP layer which makes

   security transparent to the applications, as opposed to TLS or DTLS

   that requires application to implement TLS/DTLS.  As a result, IPsec

   enable to define the security rules in a similar way one establishes

   firewall rules.

 

   One of the IPsec's drawbacks is that implementing security on a per

   packet basis adds overhead to each IP packet.  Considering IoT

   devices, the data transmitted over an IP packet is expected to be

   rather small, and the cost of sending extra bytes is so high that

   IPsec/ESP can hardly be used for IoT as it is currently defined in

   RFC 4303.

 

   This document defines Diet-ESP, a protocol that compress and reduce

   the ESP overhead of IPsec/ESP so that it can fit security and energy

   efficient IoT requirements.  Diet-ESP use already existing mechanism

   like IKEv2 to negotiate the compression format.  Furthermore a lot of

   information, already existing for an IPsec Security Association, are

   reused to offer light negotiation in addition to maximum compression.

 

 


 

 

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

 

The IETF Secretariat

 

 



---
Diese E-Mail ist frei von Viren und Malware, denn der avast! Antivirus Schutz ist aktiv.
http://www.avast.com

[IPsec] New Draft Version: Diet-ESP Tobias Guggemos