Problem Areas for the IP Security Protocols
Steven M. Bellovin
AT&T Research
Abstract
The Internet Engineering Task Force (IETF) is in the process
of adopting standards for IP-layer encryption and authentication
(IPSEC). We describe a number of attacks against various versions
of these protocols, including confidentiality failures and
authentication failures. The implications of these attacks
are troubling for the utility of this entire effort.
View the full text of this paper in
ASCII (42,756 Bytes) and
POSTSCRIPT (318,868 Bytes) form.
To Become a USENIX Member, please see our
Membership Information.
|