Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: Authentication Header


Related Topics
OEP

In the News (Sun 6 Dec 09)

  
  RFC 2402 (rfc2402) - IP Authentication Header
However, some IP header fields may change in transit and the value of these fields, when the packet arrives at the receiver, may not be predictable by the sender.
Authentication Header Processing 3.1 Authentication Header Location Like ESP, AH may be employed in two ways: transport mode or tunnel mode.
The position of AH in tunnel mode, relative to the outer IP header, is the same as for AH in transport mode.
www.faqs.org /rfcs/rfc2402.html   (5459 words)

  
 [No title]
This authentication information is calculated using all of the fields in the IP datagram (including not only the IP Header but also other headers and the user data) which do not change in transit.
The increased latency is primarily due to the calculation of the authentication data by the sender and the calculation and comparison of the authentication data by the receiver for each IP datagram containing an Authentication Header.
If an asymmetric authentication algorithm is used and the routers are aware of the appropriate public keys and authentication algorithm, then the routers possessing the authentication public key could authenticate the traffic being handled without being able to forge or modify otherwise legitimate traffic.
www.rfc-editor.org /rfc/rfc1826.txt   (3759 words)

  
 RFC 2402 - IP Authentication Header. S. Kent, R. Atkinson.
RFC 2402 IP Authentication Header November 1998 If anti-replay is disabled, the sender does not need to monitor or reset the counter, e.g., in the case of manual key management (see Section 5.) However, the sender still increments the counter and when it reaches the maximum value, the counter rolls over back to zero.
RFC 2402 IP Authentication Header November 1998 3.3.3.2 Padding 3.3.3.2.1 Authentication Data Padding As mentioned in section 2.6, the Authentication Data field explicitly includes padding to ensure that the AH header is a multiple of 32 bits (IPv4) or 64 bits (IPv6).
RFC 2402 IP Authentication Header November 1998 DISCUSSION: Note that if the packet is either inside the window and new, or is outside the window on the "right" side, the receiver MUST authenticate the packet before updating the Sequence Number window data.
rfc.sunsite.dk /rfc/rfc2402.html   (5659 words)

  
 RFC 2617 (rfc2617) - HTTP Authentication: Basic and Digest Access Authenti
The 407 (Proxy Authentication Required) response message is used by a proxy to challenge the authorization of a client and MUST include a Proxy- Authenticate header field containing at least one challenge applicable to the proxy for the requested resource.
The authentication parameter realm is defined for all authentication schemes: realm = "realm" "=" realm-value realm-value = quoted-string The realm directive (case-insensitive) is required for all authentication schemes that issue a challenge.
These headers are instances of the Proxy-Authenticate and Proxy- Authorization headers specified in sections 10.33 and 10.34 of the HTTP/1.1 specification [2] and their behavior is subject to restrictions described there.
www.faqs.org /rfcs/rfc2617.html   (7945 words)

  
 IP Authentication Header
The Next Header is an 8-bit field that identifies the type of the next payload after the Authentication Header.
For some authentication algorithms, the byte string over which the ICV computation is performed must be a multiple of a blocksize specified by the algorithm.
The receiver computes the ICV over the appropriate fields of the packet, using the specified authentication algorithm, and verifies that it is the same as the ICV included in the Authentication Data field of the packet.
xml.resource.org /public/rfc/html/rfc2402.html   (5704 words)

  
 [No title]
Kent & Atkinson Standards Track [Page 3] RFC 2402 IP Authentication Header November 1998 2.1 Next Header The Next Header is an 8-bit field that identifies the type of the next payload after the Authentication Header.
Kent & Atkinson Standards Track [Page 11] RFC 2402 IP Authentication Header November 1998 3.3.3.2 Padding 3.3.3.2.1 Authentication Data Padding As mentioned in section 2.6, the Authentication Data field explicitly includes padding to ensure that the AH header is a multiple of 32 bits (IPv4) or 64 bits (IPv6).
Kent & Atkinson Standards Track [Page 14] RFC 2402 IP Authentication Header November 1998 DISCUSSION: Note that if the packet is either inside the window and new, or is outside the window on the "right" side, the receiver MUST authenticate the packet before updating the Sequence Number window data.
www.ietf.org /rfc/rfc2402.txt   (5495 words)

  
 RFC 2402   (Site not responding. Last check: 2007-10-08)
Kent and Atkinson Standards Track [Page 3] RFC 2402 IP Authentication Header November 1998 2.1 Next Header The Next Header is an 8-bit field that identifies the type of the next payload after the Authentication Header.
Kent and Atkinson Standards Track [Page 11] RFC 2402 IP Authentication Header November 1998 3.3.3.2 Padding 3.3.3.2.1 Authentication Data Padding As mentioned in section 2.6, the Authentication Data field explicitly includes padding to ensure that the AH header is a multiple of 32 bits (IPv4) or 64 bits (IPv6).
Kent and Atkinson Standards Track [Page 14] RFC 2402 IP Authentication Header November 1998 DISCUSSION: Note that if the packet is either inside the window and new, or is outside the window on the "right" side, the receiver MUST authenticate the packet before updating the Sequence Number window data.
www.freesoft.org /CIE/RFC/bynum.cgi?2402   (5523 words)

  
 Rob Slade's Security Glossary   (Site not responding. Last check: 2007-10-08)
Authentication of a user is generally based on something the user knows, is, or has.
Many authentication systems are now looking towards public key encryption, and the calculation of a check based upon the contents of the file or message as well as a password or key.
The ESP header is encapsulated by the IP header, and the ESP header encapsulates either the upper layer protocol header (transport mode) or an IP header (tunnel mode).
www.soci.niu.edu /~rslade/secgloss.htm   (14720 words)

  
 AH, IP Authentication Header
The IP Authentication Header is used to provide connectionless integrity and data origin authentication for IP datagrams (hereafter referred to as just "authentication"), and to provide protection against replays.
AH is an appropriate protocol to employ when confidentiality is not required (or is not permitted, e.g, due to government restrictions on use of encryption).
AH also provides authentication for selected portions of the IP header, which may be necessary in some contexts.
filibusta.crema.unimi.it /docs/rfc/ah.htm   (491 words)

  
 [No title]
The authentication parameter realm is defined for all authentication schemes: realm = "realm" "=" realm-value realm-value = quoted-string Franks, et al.
Standards Track [Page 18] RFC 2617 HTTP Authentication June 1999 Authorization: Digest username="Mufasa", realm="testrealm@host.com", nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093", uri="/dir/index.html", qop=auth, nc=00000001, cnonce="0a4f113b", response="6629fae49393a05397450978507c4ef1", opaque="5ccc069c403ebaf9f0171e9517f40e41" 3.6 Proxy-Authentication and Proxy-Authorization The digest authentication scheme may also be used for authenticating users to proxies, proxies to proxies, or proxies to origin servers by use of the Proxy-Authenticate and Proxy-Authorization headers.
Standards Track [Page 19] RFC 2617 HTTP Authentication June 1999 The most serious flaw in Basic authentication is that it results in the essentially cleartext transmission of the user's password over the physical network.
www.ietf.org /rfc/rfc2617.txt   (8494 words)

  
 RFC 1826 (rfc1826) - IP Authentication Header   (Site not responding. Last check: 2007-10-08)
Fields or options which need to change in transit (e.g., "hop count", "time to live", "ident", "fragment offset", or "routing pointer") are considered to be zero for the calculation of the authentication data.
An implementation of the IP Authentication Header will need to read that logical table of security parameters to determine how to process each datagram containing an Authentication Header (e.g., to determine which algorithm/mode and key to use in authentication).
In some situations, users MAY choose to carry explicit labels (for example, IPSO labels as defined by RFC-1108 might be used with IPv4) in addition to using the implicit labels provided by the Authentication Header.
www.faqs.org /rfcs/rfc1826.html   (3746 words)

  
 IPsec AH: IP Authentication Header RFC 2402
IP Authentication Header (AH), a key protocol in the IPsec (Internet Security) architecture, is used to provide connectionless integrity and data origin authentication for IP datagrams, and to provide protection against replays.
AH provides authentication for as much of the IP header as possible, as well as for upper level protocol data.
Next header - identifies the type of the next payload after the Authentication Header.
www.javvin.com /protocolAH.html   (419 words)

  
 AH, Authentication Header
The Authentication Header is used to provide connectionless integrity and data origin authentication for IP datagrams (hereafter referred to as just "authentication"), and to provide protection against replays.
AH may be applied alone, in combination with the Encapsulating Security Payload (ESP), or in a nested fashion through the use of tunnel mode.
Size of the Authentication Data payload in 32 bit words - 2.
www.networksorcery.com /enp/protocol/ah.htm   (489 words)

  
 IP Authentication Header
The IP Authentication Header (AH) is used to provide connectionless integrity and data origin authentication for IP datagrams (hereafter referred to as just "authentication"), and to provide protection against replays.
The protocol header (IPv4, IPv6, or Extension) immediately preceding the AH header will contain the value 51 in its Protocol (IPv4) or Next Header (IPv6, Extension) field
All options for which the bit indicates immutability are included in the ICV calculation.
xml.resource.org /public/rfc/xml/rfc2402.xml   (5388 words)

  
 Toggit Certification Home for MCSE CCNA A+ study guides and test prep
IPX packets consist of a 30-byte header which includes the network, node, and socket addresses for the source and the destination, followed by the data area, which can be from 30 bytes (only the header) to 65,535 bytes in length.
The Authentication Header (AH) ensures that the datagram has not been tampered with during transmission, and the Encapsulating Security Payload (ESP) defines encryption methods for IP data.
The new header points to the tunnel endpoint, and the original header points to the final destination of the datagram.
www.toggit.com /Library/pedia/techno.asp?Term=i&Techno=Letter   (8237 words)

  
 RFC Index 2401 - 2500 - RFC Database - eLook.org
RFC 2424 - Content Duration MIME Header Definition
RFC 2474 - Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers
RFC 2485 - DHCP Option for The Open Group's User Authentication Protocol
www.elook.org /computing/rfc/index25.html   (862 words)

  
 Introduction to FreeS/WAN   (Site not responding. Last check: 2007-10-08)
2402 IP Authentication Header 2406 IP Encapsulating Security Payload (ESP)
1321 The MD5 Message-Digest Algorithm 1828 IP Authentication using Keyed MD5 1829 The ESP DES-CBC Transform 1851 The ESP Triple DES Transform 1852 IP Authentication using Keyed SHA
RFCs for secure DNS service, which IPsec may use
www.freeswan.org /freeswan_trees/CURRENT-TREE/doc/rfc.html   (325 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.