[Pppext] draft-simpson-ppp-arc4-00.txt

William Allen Simpson <william.allen.simpson@gmail.com> Mon, 15 July 2013 22:31 UTC

Return-Path: <william.allen.simpson@gmail.com>
X-Original-To: pppext@ietfa.amsl.com
Delivered-To: pppext@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id 6676411E81B0 for <pppext@ietfa.amsl.com>; Mon, 15 Jul 2013 15:31:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id 2lBwCv7xxOjA for <pppext@ietfa.amsl.com>; Mon, 15 Jul 2013 15:31:26 -0700 (PDT)
Received: from mail-qe0-x230.google.com (mail-qe0-x230.google.com [IPv6:2607:f8b0:400d:c02::230]) by ietfa.amsl.com (Postfix) with ESMTP id 53A8911E8178 for <pppext@ietf.org>; Mon, 15 Jul 2013 15:31:20 -0700 (PDT)
Received: by mail-qe0-f48.google.com with SMTP id 2so6699987qea.7 for <pppext@ietf.org>; Mon, 15 Jul 2013 15:31:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=4op/p4wuZNCiMPYBYtCRh3QPVoZv9hSlwRTE+i9g54U=; b=DKRVHkDaR/Kvv6lf4ASPRnxK53Nyq/aEzzbHC3P1dFHVxRJTp+taPu/+/nfziqy8XE L02/Ha3lc0LRFlTUAZZaaNGb/tVt0CX2z4qwQGxF9VoNUdS9YdNYsurI2JaODP+J3JnC hn9kTGqtZigcp6JnJJ9gQzHtesyAKc5BckalQ/aVX6thPI1oUqFoLaN7S/mKJsYWB2YV b6tpqUpNkyjvoglEkv/JO4NDgogD5J+riZZrcLUJJGMCJaz50XYd3hibW4PZjWmAzNbI VCCbHa9gZbNFNmpWXWp7sQaYBtTx/BufK58gdlz75iLS9sjEUi53vJ/0o1fzIG/Bl9L9 26tQ==
X-Received: by with SMTP id v13mr53625992qeu.36.1373927479088; Mon, 15 Jul 2013 15:31:19 -0700 (PDT)
Received: from wastrel.home.lan (d192-24-251-5.try.wideopenwest.com. []) by mx.google.com with ESMTPSA id w2sm58279342qec.8.2013. for <pppext@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 15 Jul 2013 15:31:18 -0700 (PDT)
Message-ID: <51E47835.1000004@gmail.com>
Date: Mon, 15 Jul 2013 18:31:17 -0400
From: William Allen Simpson <william.allen.simpson@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: pppext@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [Pppext] draft-simpson-ppp-arc4-00.txt
X-BeenThere: pppext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PPP Extensions <pppext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pppext>, <mailto:pppext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pppext>
List-Post: <mailto:pppext@ietf.org>
List-Help: <mailto:pppext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pppext>, <mailto:pppext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 22:31:31 -0000

Here's the reason that I was looking at archives.  This is old stuff,
reformatted and updated a little.  Probably needs some more work.

But with the wide-scale link snooping in the news -- as so many of us
predicted 20+ years ago -- it's time to at least experiment.  ARCFOUR
has code already to go in routers.  We need some implementation
feedback from vendors, but this could get out the door pretty quickly.

I was working on a Salsa variant, too, but then found out about his
ChaCha successor, and so never made up my mind on which to document.

Please talk about this in Germany.  We'll also be discussing at
Usenix Security.

I also have an old session key negotiation draft lying around.  This
would all be better with nice PFS random keys....


A New Internet-Draft is available from the on-line Internet-Drafts directories.

	Title           : The PPP ARCFOUR Encryption Protocol
	Author(s)       : William Allen Simpson
	Filename        : draft-simpson-ppp-arc4-00.txt
	Pages           : 9
	Date            : 2013-07-15

    The Point-to-Point Protocol (PPP) [RFC1661] provides a standard
    method for transporting multi-protocol datagrams over point-to-point

    The PPP Encryption Control Protocol (ECP) [RFC1968] provides a method
    to negotiate and utilize encryption protocols over PPP encapsulated

    This document described the use of the ARCFOUR algorithm for
    encrypting PPP encapsulated packets.

The IETF datatracker status page for this draft is:

There's also a htmlized version available at:

Internet-Drafts are also available by anonymous FTP at: