IPv6 Opportunistic Encryption

Claude Castelluccia (1) , Gabriel Montenegro (2)

1 PLANETE - Protocols and applications for the Internet
2 Sun Labs Europe

This paper presents an Opportunistic Encryption scheme for IPv6. Our proposal relies on IPv6 Anycast, Authorization certificates and Crypto-Based Identifier- s (CBID) to provide secure and easily deployable Opportunistic Encryption in IPv6. Unlike existing schemes, our proposal does not rely on any global Third Trusted Party (such as DNSSEC or a PKI). Hence, we claim it is more secure, easier to deploy and more robust.

Mots clés: SECURITY; IPV6; OPPORTUNISTIC ENCRYPTION; IPSEC; CBID; DELEGATION

Domaines: Autre [cs.OH]

Claude Castelluccia, Gabriel Montenegro. IPv6 Opportunistic Encryption. [Research Report] RR-4568, INRIA. 2002. ⟨inria-00072020⟩