A DoS Attack Against the Integrity-Less ESP (IPSec)

Ventzislav Nikov

Paper 2006/370 Original: eprint.iacr.org/2006/370 ↗

A DoS Attack Against the Integrity-Less ESP (IPSec)

Ventzislav Nikov

Abstract

This paper describes a new practical DoS attack that can be mounted against the ``encryption-only'' configuration (i.e. without authenticated integrity) of ESP as allowed by IPSec. This finding can serve as a strong argument to convince those in charge of the IPSec standardization to improve it by banning the ``encryption-only'' configuration from the standard.

Metadata

Available format(s): PDF
Category: Applications
Publication info: Preprint.
History: 2006-11-03: last updated; 2006-11-03: published
Short URL: https://ia.cr/2006/370
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2006/370,
      author = {Ventzislav Nikov},
      title = {A DoS Attack Against the Integrity-Less ESP (IPSec)},
      howpublished = {Cryptology {ePrint} Archive, Paper 2006/370},
      year = {2006},
      url = {https://eprint.iacr.org/2006/370}
}