A generic characterization of the overheads imposed by IPsec and associated cryptographic algorithms

Xenakis, Christos; Laoutaris, Nikolaos; Merakos, Lazaros; Stavrakakis, Ioannis

doi:10.1016/j.comnet.2005.12.005

Cited by 56 publications

(54 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The mathematical analysis performed in [33] and [34] proved that the encryption/decryption delay of AES depends on the message size (S d ) and the number of million instructions per second (MIPS) of the processor (C p ). The encryption delay of AES was derived in [34] and found to be equal to: Int.…”

Section: System Analysismentioning

confidence: 99%

“…On the other hand, T AES−Enc is the number of processing cycles required to encrypt one block of data, which is equal to 6168 processing cycles for a 128 bit key (which is the size of the AES session key that we will use in the simulations). In a similar way, the authors in [34] calculate the number of processing cycles needed to decrypt one block of data (T AES−Dec ) and use it to calculate the total decryption delay of a packet, which Int. J.…”

Section: System Analysismentioning

confidence: 99%

See 1 more Smart Citation

HiMAC: Hierarchical Message Authentication Code for Secure Data Dissemination in Mobile Ad Hoc Networks

Mershad¹,

Hamié²,

Hamze³

2017

IJCNS

View full text Add to dashboard Cite

Mobile ad-hoc networks are wireless self-organized networks in which mobile nodes can connect directly to each other. This fact makes such networks highly susceptible to security risks and threats, as malicious nodes can easily disguise as new trusted nodes and start attacking the network after a certain period of time. Hence, the security of data transmission in MANET has been a hot topic in the past years. Several research works attempted to detect and stop various attacks on MANET nodes and packets. This paper presents an efficient mechanism for secure data dissemination in MANETs. Our approach is based on the identity based cryptography and Message Authentication Code (MAC). The proposed security mechanism prevents malicious nodes from tampering or replaying intermediate packets by means of signing and encrypting the packet at each intermediate trusted node. We tested the efficiency of our system using the ns2 simulator by comparing it to a similar security mechanism. The simulations illustrate that our approach obtains many advantages over other existing approaches for secure data dissemination in MANETs.

show abstract

Section: System Analysismentioning

confidence: 99%

Section: System Analysismentioning

confidence: 99%

HiMAC: Hierarchical Message Authentication Code for Secure Data Dissemination in Mobile Ad Hoc Networks

Mershad¹,

Hamié²,

Hamze³

2017

IJCNS

View full text Add to dashboard Cite

show abstract

“…One of them (Cremers, 2011) identifies the following vulnerabilities: Reflection attack on IKEv1 Main Mode with digital signatures or pre-shared keys, Reflection attack on IKEv1 Quick Mode, Reflection attack on IKEv1 Main Mode with public key encryption, Authentication failure on IKEv1 Aggressive Mode with digital signatures, Authentication failure on IKEv1 Main Mode with digital signatures that does not require selfcommunication, Reflection attack on IKEv2 phase 2 exchange. Another important aspect of the IPsec protocol is the computational overhead, described in detail in (Xenakis, 2006). The factors taken into account are the encryption type and the authentication mechanism, and the resultants reflect in the system throughput, total delay and rate increase of the protected data.…”

Section: Authentication and Identificationmentioning

confidence: 99%

Potential Applications of IPsec in Next Generation Networks

Vintila¹

2012

Cryptography and Security in Computing

View full text Add to dashboard Cite

“…The protocol increases the security level by applying different cryptographic algorithms to send and receive encrypted data over secure channels. Originally IPSec was designed for wired networks and the wireless networks' limitations, such as processing power of mobile devices and the limited resources of wireless channels were not considered initially [8].…”

Section: Ipsecmentioning

confidence: 99%