BGPsec Algorithms, Key Formats, and Signature Formats

Turner, S.; Borchert, O.

doi:10.17487/rfc8208

Cited by 7 publications

(17 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An IANA registry of algorithm suite identifiers for use in BGPsec is specified in the BGPsec algorithms document [RFC8208].…”

Section: Signature_blockmentioning

confidence: 99%

“…To this end, [RFC8208] specifies a mandatory-to-use 'current' algorithm suite for use by all BGPsec speakers.…”

Section: Algorithm Suite Considerationsmentioning

confidence: 99%

“…It is anticipated that, in the future, [RFC8208] or its successor will be updated to specify a transition from the 'current' algorithm suite to a 'new' algorithm suite. During the period of transition, all BGPsec UPDATE messages SHOULD simultaneously use both the 'current' algorithm suite and the 'new' algorithm suite.…”

Section: Algorithm Suite Considerationsmentioning

confidence: 99%

“…In such a case, [RFC8208] or its successor would be updated to specify algorithm suites appropriate for the new version of BGPsec.…”

Section: Extensibility Considerationsmentioning

confidence: 99%

“…The Elliptic Curve Digital Signature Algorithm (ECDSA) with curve P-256 is used for signing UPDATE messages in BGPsec [RFC8208]. For ECDSA, it is stated in Section 6.3 of [FIPS186-4] that a new secret random number "k" shall be generated prior to the generation of each digital signature.…”

Section: Robustness Of Secret Random Number In Ecdsamentioning

confidence: 99%

See 4 more Smart Citations

BGPsec Protocol Specification

Lepinski¹

2017

View full text Add to dashboard Cite

“…An IANA registry of algorithm suite identifiers for use in BGPsec is specified in the BGPsec algorithms document [RFC8208].…”

Section: Signature_blockmentioning

confidence: 99%

“…To this end, [RFC8208] specifies a mandatory-to-use 'current' algorithm suite for use by all BGPsec speakers.…”

Section: Algorithm Suite Considerationsmentioning

confidence: 99%

Section: Algorithm Suite Considerationsmentioning

confidence: 99%

“…In such a case, [RFC8208] or its successor would be updated to specify algorithm suites appropriate for the new version of BGPsec.…”

Section: Extensibility Considerationsmentioning

confidence: 99%

Section: Robustness Of Secret Random Number In Ecdsamentioning

confidence: 99%

See 3 more Smart Citations

BGPsec Protocol Specification

Lepinski¹

2017

View full text Add to dashboard Cite

Design and analysis of optimization algorithms to minimize cryptographic processing in BGP security protocols

Sriram

Montgomery

2017

Computer Communications

View full text Add to dashboard Cite

The Internet is subject to attacks due to vulnerabilities in its routing protocols. One proposed approach to attain greater security is to cryptographically protect network reachability announcements exchanged between Border Gateway Protocol (BGP) routers. This study proposes and evaluates the performance and efficiency of various optimization algorithms for validation of digitally signed BGP updates. In particular, this investigation focuses on the BGPSEC (BGP with SECurity extensions) protocol, currently under consideration for standardization in the Internet Engineering Task Force. We analyze three basic BGPSEC update processing algorithms: Unoptimized, Cache Common Segments (CCS) optimization, and Best Path Only (BPO) optimization. We further propose and study cache management schemes to be used in conjunction with the CCS and BPO algorithms. The performance metrics used in the analyses are: (1) routing table convergence time after BGPSEC peering reset or router reboot events and (2) peak-second signature verification workload. Both analytical modeling and detailed trace-driven simulation were performed. Results show that the BPO algorithm is 330% to 628% faster than the unoptimized algorithm for routing table convergence in a typical Internet core-facing provider edge router.

show abstract

Cross-VM Cache Timing Attacks on Virtualized Network Functions

Shin

2019

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

Network function virtualization (NFV) achieves the flexibility of network service provisioning by using virtualization technology. However, NFV is exposed to a serious security threat known as cross-VM cache timing attacks. In this letter, we look into real security impacts on network virtualization. Specifically, we present two kinds of practical cache timing attacks on virtualized firewalls and routers. We also propose some countermeasures to mitigate such attacks on virtualized network functions.

show abstract

BGPsec Algorithms, Key Formats, and Signature Formats

Abstract: This document specifies the algorithms, algorithm parameters, asymmetric key formats, asymmetric key sizes, and signature formats

Cited by 7 publications

References 2 publications

BGPsec Protocol Specification

BGPsec Protocol Specification

Design and analysis of optimization algorithms to minimize cryptographic processing in BGP security protocols

Cross-VM Cache Timing Attacks on Virtualized Network Functions

Contact Info

Product

Resources

About