[tcpm] I-D Action:draft-ietf-tcpm-tcp-auth-opt-04.txt

[[e-mail]]

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the TCP Maintenance and Minor Extensions Working Group of the IETF.


	Title           : The TCP Authentication Option
	Author(s)       : J. Touch, et al.
	Filename        : draft-ietf-tcpm-tcp-auth-opt-04.txt
	Pages           : 48
	Date            : 2009-03-09

This document specifies the TCP Authentication Option (TCP-AO), which 
obsoletes the TCP MD5 Signature option of RFC-2385 (TCP MD5). TCP-AO 
specifies the use of stronger Message Authentication Codes (MACs), 
protects against replays even for long-lived TCP connections, and 
provides more details on the association of security with TCP 
connections than TCP MD5. TCP-AO is compatible with either static 
master key configuration or an external, out-of-band master key 
management mechanism; in either case, TCP-AO also protects 
connections when using the same master key across repeated instances 
of a connection, using traffic keys derived from the master key, and 
coordinates key changes between endpoints. The result is intended to 
support current infrastructure uses of TCP MD5, such as to protect 
long-lived connections (as used, e.g., in BGP and LDP), and to 
support a larger set of MACs with minimal other system and 
operational changes. TCP-AO uses its own option identifier, even 
though used mutually exclusive of TCP MD5 on a given TCP connection. 
TCP-AO supports IPv6, and is fully compatible with the requirements 
for the replacement of TCP MD5.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-04.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

ftp://ftp.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-04.txt"><ftp://ftp.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-04.txt>