Re: [OSPF] OSPF HMAC Cryptographic Authentication

Rohit Gupta wrote:
> Hi,
>
> I could not see any new field added in the OSPF message. How do you then make out whether the OSPF router is using HMAC-SHA1 algorithm or the MD5 (the normal OSPF authentication algorithm)?
>   
Hi Rohit,
As more than one person pointed out to me, AuType 2 doesn't
define the algorithm used for cryptographic authentication. From D.3 in
RFC 2328:

     Key ID
            This field identifies the algorithm and secret key used to
            create the message digest appended to the OSPF packet. Key
            Identifiers are unique per-interface (or equivalently, per-
            subnet).

Hence, no new AuType value is required. However, since the use of MD5
is described FULLY in appendix D, it would be nice to point out the 
similarities
and differences in this draft.

Thanks,
Acee
> Thanks,
> Rohit
>
> ----- Original Message ----
> From: Manav Bhatia <manav_bhatia06@yahoo.co.uk>
> To: ospf@ietf.org
> Sent: Saturday, 15 July, 2006 5:06:45 AM
> Subject: [OSPF] OSPF HMAC Cryptographic Authentication
>
>
> Hi,
>
> We have just posted a draft that describes a mechanism for authenticating OSPF packets by making use of HMAC algorithm in conjunction with the SHA family of cryptographic hash functions. It would be great if the WG can provide some feedback and comments on the same.
>
> http://www.ietf.org/internet-drafts/draft-bhatia-manral-white-ospf-hmac-sha-00.txt
>
> Thanks,
> Manav
>
>   
>> ----- Forwarded Message ----
>> From: Internet-Drafts@ietf.org
>> To: i-d-announce@ietf.org
>> Sent: Saturday, July 15, 2006 1:20:01 AM
>> Subject: I-D ACTION:draft-bhatia-manral-white-ospf-hmac-sha-00.txt
>>
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts 
>> directories.
>>
>>
>>    Title        : OSPF HMAC Cryptographic Authentication
>>    Author(s)    : M. Bhatia, et al.
>>    Filename    : draft-bhatia-manral-white-ospf-hmac-sha-00.txt
>>    Pages        : 10
>>    Date        : 2006-6-14
>>
>>   This document describes a mechanism for authenticating OSPF packets
>>   by making use of the HMAC algorithm in conjunction with the SHA
>>   family of cryptographic hash functions. Because of the way the hash
>>   functions are used in HMAC construction, the collision attacks
>>   currently known against SHA-1 do not apply.
>>
>>   This will be done in addition to the already documented
>>   authentication schemes described in the base specification.
>>
>>
>> A URL for this Internet-Draft is:
>> http://www.ietf.org/internet-drafts/draft-bhatia-manral-white-ospf-hmac-sha-00.txt
>>
>> To remove yourself from the I-D Announcement list, send a message to
>> i-d-announce-request@ietf.org with the word unsubscribe in the body of the 
>> message.
>> You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce
>> to change your subscription settings.
>>
>>     
>
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www1.ietf.org/mailman/listinfo/ospf
>
> Sign Up for your FREE eWallet at www.wallet365.com
>
>
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www1.ietf.org/mailman/listinfo/ospf
>
>   

_______________________________________________
OSPF mailing list
OSPF@ietf.org
https://www1.ietf.org/mailman/listinfo/ospf