Subject: [Hipsec] New Issue 17: Need example checksums as an appendix

From: [email-masked] (Mika Kousa)
Date: Mon Oct 6 07:11:00 2003

On Mon, 29 Sep 2003, Pekka Nikander wrote:

-> Tom reminded me that HIP checksums have been a very
-> hard part to get right in the past.  Hence, we need
-> to have checksum examples in an appendix.  More specifically,
-> we need to have at least the following examples:
->
-> ...
->    - a simple HIP packet carried over IPv6 (an I1, for example)

Configuration used:
Initiator: IPv6 address 2001:db8::1, HIT 4000::1
Responder: IPv6 address 2001:db8::2, HIT 4000::2

tcpdump (with HIP patch) shows:

14:17:27.021589 2001:db8::1 > 2001:db8::2: HIP 4000::1 > 4000::2: len=4,type=1,ver_res=0x10,control=0x0,checksum=59367 I1 (len 40, hlim 255)

Dump of the whole IPv6 packet:

0x0000   6000 0000 0028 63ff 2001 0db8 0000 0000
0x0010   0000 0000 0000 0001 2001 0db8 0000 0000
0x0020   0000 0000 0000 0002 3b04 0110 0000 e7e7
0x0030   4000 0000 0000 0000 0000 0000 0000 0001
0x0040   4000 0000 0000 0000 0000 0000 0000 0002

-- 
  printk(KERN_ERR "happy meal: Transceiver BigMac ATTACK!");
      -- linux/drivers/net/sunhme.c