The ESP DES-CBC Cipher Algorithm With Explicit IV

Madson, C.; Doraswamy, Naganand

doi:10.17487/rfc2405

Cited by 39 publications

(16 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In tunnel mode, the entire inner IP datagram is encrypted and forms part of the payload of the outer IP datagram. The use in ESP of a variety of block ciphers has been specified, including DES [21], triple-DES [26] and AES [11]. ESP in tunnel mode inserts security information in the form of a header between the outer IP header and the encrypted version of the inner datagram.…”

Section: Ipsecmentioning

confidence: 99%

Cryptography in Theory and Practice: The Case of Encryption in IPsec

Paterson

Yau

2006

Advances in Cryptology - EUROCRYPT 2006

View full text Add to dashboard Cite

Abstract. Despite well-known results in theoretical cryptography highlighting the vulnerabilities of unauthenticated encryption, the IPsec standards mandate its support. We present evidence that such "encryption-only" configurations are in fact still often selected by users of IPsec in practice, even with strong warnings advising against this in the IPsec standards. We then describe a variety of attacks against such configurations and report on their successful implementation in the case of the Linux kernel implementation of IPsec. Our attacks are realistic in their requirements, highly efficient, and recover the complete contents of IPsec-protected datagrams. Our attacks still apply when integrity protection is provided by a higher layer protocol, and in some cases even when it is supplied by IPsec itself.

show abstract

Section: Ipsecmentioning

confidence: 99%

Cryptography in Theory and Practice: The Case of Encryption in IPsec

Paterson

Yau

2006

Advances in Cryptology - EUROCRYPT 2006

View full text Add to dashboard Cite

show abstract

“…By these features the multi step PPTP relay system expands usability. 1 PPTP IPsec Encryption Microsoft Point-To-Point Encryption (6) DES-CBC (7) et al…”

Section: Implementation Of Pass Through Pptp Relay System With Authenmentioning

confidence: 99%

Implementation of Pass Through PPTP Relay System with Authentication at Each Gateway and Its Performance Evaluations

Saito

Uehara

Izumi³

et al. 2004

IEEJ Trans.EIS

View full text Add to dashboard Cite

The VPN (Virtual Private Network) technique becomes more and more popular to protect contents of messages and to achieve secure communication from incidents, such as tapping. However, it grow in usage that a VPN server is used on a sub-network in part of an office-wide network. But, a PPTP system included in Windows operating systems cannot establish nested VPN links. Moreover encrypted communication by VPN hides a user of the VPN connection. Consequently, any administrators of network systems can't find out the users of the VPN connection via firewall, moreover can't decide whether if the user is legal or not. In order to solve this problem, we developed a multi step PPTP relay system on a firewall. This system solves all the problems of our previously developed PPTP relay system (1) . The new relay system improves security by encrypting through the whole end-to-end communication and abolishing of prior registration of passwords for the next step. Furthermore, transport speed is accelerated, and the restriction of the number of steps on relay is also abolished. By these features the multi step PPTP relay system expands usability. PPTP PPTP

show abstract

“…The algorithm for SADB_AALG_SHA1HMAC is defined in [MG98b]. The algorithm for SADB_EALG_DESCBC is defined in [MD98]. SADB_EALG_NULL is the NULL encryption algorithm, defined in [GK98].…”

Section: Algorithm Typesmentioning

confidence: 99%