IPv6: The Next Generation Internet Protocol
A practical, hands-on guide to the new version of the Internet Protocol, written for network administrators and managers who will work with IPv6.
TABLE OF CONTENTS IPv6: The Next Generation Internet Protocol
Section 1.5: SECURITY FACTORS
1.5 SECURITY FACTORS
When dealing with any Internet protocol, it is important to specify the IP Authentication Header as well as the IP Encapsulating Security Payload, which will be used with IPv6. It is important that it conform with the Security Architecture for the Internet Protocol.
The Authentication Header (AH) yields both integrity and authentication for IP datagrams. It is important to note that the Security Architecture for the Internet Protocol designates the overall security plan for IP and yields important background for this specification.
The Encapsulating Security Payload (ESP) yields confidentiality for IP datagrams by encrypting the payload data to be protected. In fact, ESP utilizes the Cipher Block Chaining (CBC) mode of the US Data Encryption Standard (DES) algorithm.
All implementations that claim conformance or compliance with the Encapsulating Security Payload specification have to implement this in the DES-CBC transform. The Security Architecture for the Internet Protocol defines the overall security plan for IP and yields important background for this section.
Copyright Butterworth-Heinemann 1998 under license agreement with Books24x7
