From hipsec-bounces@lists.ietf.org Fri Dec 02 05:14:51 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ei7wJ-0005Cr-J4; Fri, 02 Dec 2005 05:14:51 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ei7wI-0005Cc-83 for hipsec@megatron.ietf.org; Fri, 02 Dec 2005 05:14:50 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA02701 for ; Fri, 2 Dec 2005 05:14:01 -0500 (EST) Received: from xproxy.gmail.com ([66.249.82.198]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ei8Gw-0000VT-AF for hipsec@ietf.org; Fri, 02 Dec 2005 05:36:11 -0500 Received: by xproxy.gmail.com with SMTP id t12so394811wxc for ; Fri, 02 Dec 2005 02:14:47 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=dq1MLYFQFQncqemPcfbozD5uofMLlqpcTv65H1UlChqLHabwSpNjfAXsxpQsOCz8kYKkf+BRz26iZsv1+RJYt24BdvyYGH1FkH6nDtrRnWQRzseNR2I0C7tzO/CDbuXdS7DsOq+pgwitfLgbyhPdKE6vz43XBf6HGCxtxWtecX0= Received: by 10.70.14.11 with SMTP id 11mr3412207wxn; Fri, 02 Dec 2005 02:14:47 -0800 (PST) Received: by 10.70.38.20 with HTTP; Fri, 2 Dec 2005 02:14:47 -0800 (PST) Message-ID: <73a684430512020214x2ca5cd8cp1a8ca87b38b0b4a1@mail.gmail.com> Date: Fri, 2 Dec 2005 02:14:47 -0800 From: Drakie Awita To: hipsec@ietf.org Subject: [Hipsec] HMAC v.s. HIP_SIGNATURE Parameter (was: HIP signatures) MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Spam-Score: 0.0 (/) X-Scan-Signature: 5a9a1bd6c2d06a21d748b7d0070ddcb8 Content-Transfer-Encoding: quoted-printable Cc: X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org HI, I'm a newie in HIP. In the latest draft-ietf-hip-base-04.txt, it says that both HMAC & HIP_SIGNATURE parameters are required in R2, UPDATE, CLOSE, and CLOSE_ACK. Why do we need both HMAC & RSA signatures to authenticate a single HIP packet? I've seen the same question fromJulien's posting over 2 years ago. Is the answer still the same? Also, the top paragraph of Page 18 says: UPDATE is protected by both HMAC and HIP_SIGNATURE parameters, since processing UPDATE signatures alone is a potential DoS attack against intermediate system. Can someone help explains the "potential DoS attack" scenario with only HIP_SIGNATURE in UPDATE packet? Thanks, --- Drakie On Fri Sep 12 13:44:01 2003, Pekka Nikander wrote: > Julien, > > Julien Laganier wrote: > > Does anybody knows why authenticated HIP packet are not authenticated w= ith a > > HMAC rather than signed with DSA ? (apart from R2 so the receiver sign = the > > initiator's HIT) > > AFAIK, there are two reasons: > - the signatures are needed anyway for middle boxes > (see the architecture document) > - HMACs were not historically used, perhaps just due to simplicity > (I think only Bob can tell the history right) > > Of course, you do need the signatures in R1, I2 and, R2 anyway. > The packets coming after them could have both a HMAC and a signature. > Some (like AC and ACR) will do even without signatures, since they > do not need to be checked by middleboxes. > > > The keying material for HMAC can be derived from the shared secret. Tha= t would > > be cheaper for both nodes. > > I am working on that. See the intermediate version on my web site > (URLs in recent messages, see the archive). > > --Pekka Nikander > > > > _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec From hipsec-bounces@lists.ietf.org Fri Dec 02 07:03:24 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ei9dM-0005rn-5I; Fri, 02 Dec 2005 07:03:24 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Ei9dL-0005or-24 for hipsec@megatron.ietf.org; Fri, 02 Dec 2005 07:03:23 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA13401 for ; Fri, 2 Dec 2005 07:02:35 -0500 (EST) Received: from n2.nomadiclab.com ([193.234.219.2]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ei9y0-00049w-4U for hipsec@ietf.org; Fri, 02 Dec 2005 07:24:45 -0500 Received: from [127.0.0.1] (localhost [127.0.0.1]) by n2.nomadiclab.com (Postfix) with ESMTP id 3409B212C45; Fri, 2 Dec 2005 14:03:00 +0200 (EET) In-Reply-To: <73a684430512020214x2ca5cd8cp1a8ca87b38b0b4a1@mail.gmail.com> References: <73a684430512020214x2ca5cd8cp1a8ca87b38b0b4a1@mail.gmail.com> Mime-Version: 1.0 (Apple Message framework v746.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Pekka Nikander Subject: Re: [Hipsec] HMAC v.s. HIP_SIGNATURE Parameter (was: HIP signatures) Date: Fri, 2 Dec 2005 13:02:58 +0100 To: Drakie Awita X-Mailer: Apple Mail (2.746.2) X-Spam-Score: 0.0 (/) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Content-Transfer-Encoding: 7bit Cc: hipsec@ietf.org X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org > I'm a newie in HIP. In the latest draft-ietf-hip-base-04.txt, it says > that both HMAC & HIP_SIGNATURE parameters are required in R2, UPDATE, > CLOSE, and CLOSE_ACK. Why do we need both HMAC & RSA signatures to > authenticate a single HIP packet? > > I've seen the same question fromJulien's posting over 2 years ago. Is > the answer still the same? > > Also, the top paragraph of Page 18 says: > > UPDATE is protected by both HMAC and HIP_SIGNATURE parameters, > since processing UPDATE signatures alone is a potential DoS > attack > against intermediate system. > > Can someone help explains the "potential DoS attack" scenario with > only HIP_SIGNATURE in UPDATE packet? The reason why there is the SIG is to allow middle boxes to verify the packet. SIG is not needed by the end recipient. HMAC is enough (and better) for the end recipient, as it requires less CPU to verify it. If we didn't consider middle boxes, there would be no need for the SIG, except perhaps in R2. --Pekka _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec From hipsec-bounces@lists.ietf.org Fri Dec 09 09:42:08 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EkjRo-0002BN-An; Fri, 09 Dec 2005 09:42:08 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EkjRm-0002A3-BB for hipsec@megatron.ietf.org; Fri, 09 Dec 2005 09:42:06 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA12877 for ; Fri, 9 Dec 2005 09:41:03 -0500 (EST) Received: from mx.laposte.net ([81.255.54.11]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EkjRi-00060c-C7 for hipsec@ietf.org; Fri, 09 Dec 2005 09:42:09 -0500 Received: from [192.168.1.121] (212.119.9.178) by mx.laposte.net (7.2.060.1) (authenticated as julien.laganier) id 43839F46011171C4 for hipsec@ietf.org; Fri, 9 Dec 2005 15:41:32 +0100 From: Julien Laganier To: hipsec@ietf.org Date: Fri, 9 Dec 2005 15:43:47 +0100 User-Agent: KMail/1.8 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200512091543.47677.julien.IETF@laposte.net> X-Spam-Score: 0.1 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Content-Transfer-Encoding: 7bit Cc: Subject: [Hipsec] Updated DNS and Registration I-Ds X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org Folks, You will find here htmlwdiff and txt versions of the updated DNS and registration drafts I plan to submit shortly: The (minor) changes for the registration drafts, according to comments received during WGLC, are editorial. The (BIG) change for the DNS draft is that rendezvous server information HIPRVS and host identity information HIPHI are now collapsed into a single DNS RR, the HIP RR, as agreed at last F2F meeting. I also shortened the introduction as per comment received during WGLC. --julien _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec From hipsec-bounces@lists.ietf.org Fri Dec 16 15:50:25 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EnMX3-0003DZ-9K; Fri, 16 Dec 2005 15:50:25 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EnMWi-00031E-Ht; Fri, 16 Dec 2005 15:50:04 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12497; Fri, 16 Dec 2005 15:49:03 -0500 (EST) Received: from [132.151.6.50] (helo=newodin.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EnMYM-0006VD-IG; Fri, 16 Dec 2005 15:51:47 -0500 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1EnMWf-0006Cm-Nn; Fri, 16 Dec 2005 15:50:01 -0500 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Fri, 16 Dec 2005 15:50:01 -0500 X-Spam-Score: 0.4 (/) X-Scan-Signature: 73734d43604d52d23b3eba644a169745 Cc: hipsec@ietf.org Subject: [Hipsec] I-D ACTION:draft-ietf-hip-dns-04.txt X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Host Identity Protocol Working Group of the IETF. Title : Host Identity Protocol (HIP) Domain Name System (DNS) Extensions Author(s) : P. Nikander, J. Laganier Filename : draft-ietf-hip-dns-04.txt Pages : 23 Date : 2005-12-16 This document specifies a new resource record (RR) for the Domain Name System (DNS), and how to use it with the Host Identity Protocol (HIP.) This RR allows a HIP node to store in the DNS its Host Identity (HI, the public component of the node public-private key pair), Host Identity Tag (HIT, a truncated hash of its public key), and the Domain Names of its rendezvous servers (RVS.) A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-hip-dns-04.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-hip-dns-04.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-hip-dns-04.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-12-16113238.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-hip-dns-04.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-hip-dns-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-12-16113238.I-D@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec --NextPart-- From hipsec-bounces@lists.ietf.org Fri Dec 16 15:50:25 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EnMX3-0003Dy-L6; Fri, 16 Dec 2005 15:50:25 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EnMWi-00031G-Lm; Fri, 16 Dec 2005 15:50:04 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA12502; Fri, 16 Dec 2005 15:49:04 -0500 (EST) Received: from [132.151.6.50] (helo=newodin.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EnMYM-0006VG-Jb; Fri, 16 Dec 2005 15:51:46 -0500 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1EnMWf-0006Cs-Oo; Fri, 16 Dec 2005 15:50:01 -0500 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Fri, 16 Dec 2005 15:50:01 -0500 X-Spam-Score: 0.4 (/) X-Scan-Signature: 31247fb3be228bb596db9127becad0bc Cc: hipsec@ietf.org Subject: [Hipsec] I-D ACTION:draft-ietf-hip-registration-01.txt X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Host Identity Protocol Working Group of the IETF. Title : Host Identity Protocol (HIP) Registration Extension Author(s) : J. Laganier, et al. Filename : draft-ietf-hip-registration-01.txt Pages : 14 Date : 2005-12-16 This document specifies a registration mechanism for the Host Identity Protocol (HIP) that allows hosts to register with services, such as HIP rendezvous servers or middleboxes. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-hip-registration-01.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-hip-registration-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-hip-registration-01.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-12-16113355.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-hip-registration-01.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-hip-registration-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-12-16113355.I-D@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec --NextPart-- From hipsec-bounces@lists.ietf.org Mon Dec 19 01:34:25 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EoEbJ-0002SW-4B; Mon, 19 Dec 2005 01:34:25 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EoEbI-0002SD-3Q for hipsec@megatron.ietf.org; Mon, 19 Dec 2005 01:34:24 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA23300 for ; Mon, 19 Dec 2005 01:33:21 -0500 (EST) Received: from m13-31.163.com ([220.181.13.31] helo=163.com) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1EoEdQ-000791-Hb for hipsec@ietf.org; Mon, 19 Dec 2005 01:36:38 -0500 Received: from web-app31 ( web-app31 [192.168.193.31] ) by webmail (Coremail) ; Mon, 19 Dec 2005 14:18:09 +0800 (CST) MIME-Version: 1.0 Message-ID: <43A650A1.000063.30983@bj163app31.163.com> Date: Mon, 19 Dec 2005 14:18:09 +0800 (CST) From: "=?gb2312?B?aXB2NnlzZw==?=" To: hipsec@ietf.org X-Priority: 3 X-Originating-IP: [202.112.157.53] X-Mailer: 163com X-Spam-Score: 2.5 (++) X-Scan-Signature: 21c69d3cfc2dd19218717dbe1d974352 Cc: Subject: [Hipsec] hip in ns-2 X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1402244274==" Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org --===============1402244274== Content-Type: Multipart/Alternative; boundary="Boundary-=_dOTuPUNOrIJZphkXUPRstjgPRbHO" --Boundary-=_dOTuPUNOrIJZphkXUPRstjgPRbHO Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 SGVsbG8sDQogICAgSSB3YXMgd29uZGVyaW5nIGlmIGFueW9uZSBrbmV3IG9mIGFueSBucy0y IGJhc2VkIHRvb2xzIHRoYXQgY291bGQgcGVyZm9ybSBhbiBhbmFseXNpcyBvZiBoaXA/IEFu eSBhZHZpY2UgYW5kIGhlbHAgaXMgbXVjaCBhcHByZWNpYXRlZC4NCiANCiANCiANCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KIA0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgSmVmZnJleQ0KDQoNCg0K --Boundary-=_dOTuPUNOrIJZphkXUPRstjgPRbHO Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: base64 PFA+SGVsbG8sPC9QPg0KPFA+Jm5ic3A7Jm5ic3A7Jm5ic3A7IEkgd2FzIHdvbmRlcmluZyBp ZiBhbnlvbmUga25ldyBvZiBhbnkmbmJzcDtucy0yIGJhc2VkIHRvb2xzIHRoYXQgY291bGQg cGVyZm9ybSBhbiBhbmFseXNpcyBvZiBoaXA/IEFueSBhZHZpY2UgYW5kIGhlbHAgaXMgbXVj aCBhcHByZWNpYXRlZC48L1A+DQo8UD4mbmJzcDs8L1A+DQo8UD4mbmJzcDs8L1A+DQo8UD4m bmJzcDs8L1A+DQo8UD4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg0KPFA+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEplZmZyZXk8QlI+PEJSPjxCUj48QlI+PC9Q PjxTUEFOID48L1NQQU4+PGJyPjwhLS0gZm9vdGVyIC0tPjxicj48YnI+PGJyPjxicj48YnI+ PGRpdiBzdHlsZT0iYm9yZGVyLWJvdHRvbToxcHggc29saWQgIzk5OSI+PC9kaXY+PGJyPg0K DQoJPGZvbnQgY29sb3I9ImJsYWNrIiBzdHlsZT0iZm9udC1zaXplOjE0LjhweCI+xOogxKkg wLKjodPKIM/kIMDPINPDILunIL/sILvYIMC0ILLOILzTIM3yINSqILTzIL2xILvYIMChILvu ILavIKOhIDwvZm9udD4NCgk8YnI+DQoJPGEgaHJlZj0iaHR0cDovL2ppZmVuLm1haWwuMTYz LmNvbS9hY3RfaG9tZS9pbmRleC5odG0/ZnJvbT1mb290ZXIiIHRhcmdldD0iX2JsYW5rIiBz dHlsZT0iZm9udC1zaXplOjEycHg7bGluZS1oZWlnaHQ6MTYwJTtjb2xvcjpibHVlIj48YiBz dHlsZT0iY29sb3I6cmVkIj6/7CDHwCCjoSDN6iDIqyCw1yDLzTwvYj4go7pJQk0gytYgzOEg tecgxNSjrCBOT0tJQSC43yC2yyDK1iC7+qOsaVBvZCBuYW5vIMqxIMnQIE1QMyChow0KPC9h Pg0K --Boundary-=_dOTuPUNOrIJZphkXUPRstjgPRbHO-- --===============1402244274== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec --===============1402244274==-- From hipsec-bounces@lists.ietf.org Thu Dec 22 04:04:20 2005 Received: from localhost.cnri.reston.va.us ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EpMN2-0001vZ-Rz; Thu, 22 Dec 2005 04:04:20 -0500 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EpMN0-0001ul-W1 for hipsec@megatron.ietf.org; Thu, 22 Dec 2005 04:04:19 -0500 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA16453 for ; Thu, 22 Dec 2005 04:03:13 -0500 (EST) Received: from courier.cs.helsinki.fi ([128.214.9.1] helo=mail.cs.helsinki.fi) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EpMPm-0002jk-UO for hipsec@ietf.org; Thu, 22 Dec 2005 04:07:12 -0500 Received: from [217.152.227.131] (hippy.infrahip.net [217.152.227.131]) (AUTH: PLAIN gurtov, SSL: TLSv1/SSLv3,256bits,AES256-SHA) by mail.cs.helsinki.fi with esmtp; Thu, 22 Dec 2005 11:04:15 +0200 id 00070139.43AA6C0F.00004F64 Message-ID: <43AA6C0A.5000607@cs.helsinki.fi> Date: Thu, 22 Dec 2005 11:04:10 +0200 From: Andrei Gurtov User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923) X-Accept-Language: en-us, en Mime-Version: 1.0 To: ipv6ysg Subject: Re: [Hipsec] hip in ns-2 References: <43A650A1.000063.30983@bj163app31.163.com> In-Reply-To: <43A650A1.000063.30983@bj163app31.163.com> X-Spam-Score: 0.0 (/) X-Scan-Signature: 1676547e4f33b5e63227e9c02bd359e3 Cc: hipsec@ietf.org X-BeenThere: hipsec@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0504314216==" Sender: hipsec-bounces@lists.ietf.org Errors-To: hipsec-bounces@lists.ietf.org This is a MIME-formatted message. If you see this text it means that your E-mail software does not support MIME-formatted messages. --===============0504314216== Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="=_courier-20327-1135242256-0001-2" This is a MIME-formatted message. If you see this text it means that your E-mail software does not support MIME-formatted messages. --=_courier-20327-1135242256-0001-2 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: 8bit Hi, I don't think anyone implemented HIP in ns-2 yet. It might be quite difficult in fact. If that implementation does everything that real HIP implementations do, such as IPsec data encryption and public key crypto, it would be impossible to run experiments with multiple HIP connections in accelerated virtual time because CPU power would not be enough. What perhaps could be useful is a simple implementation of HIP base exchange and update messages to estimate the RTT delay and bandwith consumption they produce. Andrei ipv6ysg wrote: > Hello, > > I was wondering if anyone knew of any ns-2 based tools that could > perform an analysis of hip? Any advice and help is much appreciated. > > Jeffrey > > > > > > > > > > > 年 末 啦！邮 箱 老 用 户 快 回 来参 加 万 元 大 奖 回 馈 活 动 ！ > *快 抢 ！ 完 全 白 送* ：IBM 手 提 电 脑， NOKIA 高 端 手 机，iPod > nano 时 尚 MP3 。 > > >------------------------------------------------------------------------ > >_______________________________________________ >Hipsec mailing list >Hipsec@lists.ietf.org >https://www1.ietf.org/mailman/listinfo/hipsec > > --=_courier-20327-1135242256-0001-2 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJKzCC AvAwggJZoAMCAQICAw6O2TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNDI1MTAxMDI4WhcNMDYwNDI1MTAxMDI4 WjBgMQ8wDQYDVQQEEwZHdXJ0b3YxDzANBgNVBCoTBkFuZHJlaTEWMBQGA1UEAxMNQW5kcmVp IEd1cnRvdjEkMCIGCSqGSIb3DQEJARYVZ3VydG92QGNzLmhlbHNpbmtpLmZpMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/HBlES2QI1Dd00OrqhRWyfaw/779M7nBpaVaOwr TvumJ45t9b80teI3r5DFb7H4Ddvdsa+fYrzhhNwYyz6UHED/fvIiC3GEiYmz/9o6k8lrr8nU ch1NIgvcQvateZ9Vug5RaEy9AhRhxbITmevk+1kmpXJGxT/7IwyoN5H1Yl4P+usCBJYYK8o4 v/Dh4mpDT+drwKB7FRmXsYExDlDeY76K+E6u15rIL0KsU8NPTb3+R/0Pg/QCDeLu6/dILRhS 8nJCYZiXTPt+lqjhCRF/2kgcWknbyxssprdjxH4is1Up4m0vFLPlUAKllIW9Q1XK8z2qkMUk fUWO3WvglPc0/QIDAQABozIwMDAgBgNVHREEGTAXgRVndXJ0b3ZAY3MuaGVsc2lua2kuZmkw DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQAluIZsj/uZ3du6ZtzmvvqGEMFFAcRP N2HBHfR8H4kUmdGDYJ5U1BCUv6ELoKXXl/fyljyZnSSWWaxvUuSHldn8gWc9oGEkJoFaS+Bo 6L+8H9PzyD32AxrQSZ/UaAQsPqHRg+dy+M4ikmxVLzK+1xTFB2sIl5PmnRFsQUm2I10pbDCC AvAwggJZoAMCAQICAw6O2TANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwNDI1MTAxMDI4WhcNMDYwNDI1MTAxMDI4 WjBgMQ8wDQYDVQQEEwZHdXJ0b3YxDzANBgNVBCoTBkFuZHJlaTEWMBQGA1UEAxMNQW5kcmVp IEd1cnRvdjEkMCIGCSqGSIb3DQEJARYVZ3VydG92QGNzLmhlbHNpbmtpLmZpMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/HBlES2QI1Dd00OrqhRWyfaw/779M7nBpaVaOwr TvumJ45t9b80teI3r5DFb7H4Ddvdsa+fYrzhhNwYyz6UHED/fvIiC3GEiYmz/9o6k8lrr8nU ch1NIgvcQvateZ9Vug5RaEy9AhRhxbITmevk+1kmpXJGxT/7IwyoN5H1Yl4P+usCBJYYK8o4 v/Dh4mpDT+drwKB7FRmXsYExDlDeY76K+E6u15rIL0KsU8NPTb3+R/0Pg/QCDeLu6/dILRhS 8nJCYZiXTPt+lqjhCRF/2kgcWknbyxssprdjxH4is1Up4m0vFLPlUAKllIW9Q1XK8z2qkMUk fUWO3WvglPc0/QIDAQABozIwMDAgBgNVHREEGTAXgRVndXJ0b3ZAY3MuaGVsc2lua2kuZmkw DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQAluIZsj/uZ3du6ZtzmvvqGEMFFAcRP N2HBHfR8H4kUmdGDYJ5U1BCUv6ELoKXXl/fyljyZnSSWWaxvUuSHldn8gWc9oGEkJoFaS+Bo 6L+8H9PzyD32AxrQSZ/UaAQsPqHRg+dy+M4ikmxVLzK+1xTFB2sIl5PmnRFsQUm2I10pbDCC Az8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQI EwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENv bnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAi BgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVy c29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5 NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBM dGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzAN BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9Vvy Gna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOC dz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCB kTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwudGhh d3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQEAwIBBjApBgNV HREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcNAQEFBQAD gYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t4WFi w9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpb NU1341YheILcIRk13iSx0x1G/11fZU8xggM7MIIDNwIBATBpMGIxCzAJBgNVBAYTAlpBMSUw IwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIDDo7ZMAkGBSsOAwIaBQCgggGnMBgGCSqG SIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA1MTIyMjA5MDQxMFowIwYJ KoZIhvcNAQkEMRYEFC9vd7jKyGO8U0sTKgg92AiXxbOCMFIGCSqGSIb3DQEJDzFFMEMwCgYI KoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqG SIb3DQMCAgEoMHgGCSsGAQQBgjcQBDFrMGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRo YXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBJc3N1aW5nIENBAgMOjtkwegYLKoZIhvcNAQkQAgsxa6BpMGIxCzAJBgNVBAYT AlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNU aGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIDDo7ZMA0GCSqGSIb3DQEBAQUA BIIBAJnAof5J9AIBH5WuItEXE0TKMxv8knCB87NUB/0wDcDJSDZGHFP+l4kfdbgwufPJnQu7 5gZ1qPcEm6nGu1QVPP7DjjAZfhbl2WvwrQqbyCXDMVpA6bKvd+DF105pJHBSPt6yDO6tYR1v EHWeLWwqktKwbh46WrH7RtyyvqR6rP78ctekHK/q4TjbG/7yEFPsuxDdeh8NXtjX53cIomW2 gB4u3+Al5zI6rRrrRVWw6P6IZnOeOEDMgM9HPDWFWZAfAX6JZHh2HUSuWCNKN6CQvK/NU6Q5 qV/dZoLLv+G2GDUt8HZmE6UpfM0SWNxsR32BT4A6Ozd5SC7/HX6m0nV0lDQAAAAAAAA= --=_courier-20327-1135242256-0001-2-- --===============0504314216== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Hipsec mailing list Hipsec@lists.ietf.org https://www1.ietf.org/mailman/listinfo/hipsec --===============0504314216==--