DHCP Options for Protocol for Carrying Authentication for Network Access (PANA) Authentication Agents

Morand, Lionel

doi:10.17487/rfc5192

Cited by 7 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since the DUID has no effect on the DHCPv6 options, additions to the protocol, such as SIP configuration and DNS configuration, are not broken by a dynamic DUID [5,18]. Also, the dynamic DUID does not conflict with any of the proposed authentication overlays, Network Information Service (NIS) or Simple Network Time Protocol (SNTP) configuration options for DHCPv6 [9,10,12]. These configuration parameters will have to be reestablished for each connection, causing additional overhead.…”

Section: Dynamic Duidmentioning

confidence: 99%

Privacy and Security of DHCP Unique Identifiers

Groat¹,

Dunlop²,

Marchany³

et al. 2012

IJISR

View full text Add to dashboard Cite

As protection against the current privacy weaknesses of StateLess Address AutoConfiguration (SLAAC) in the Internet Protocol version 6 (IPv6), network administrators may choose to deploy the new Dynamic Host Configuration Protocol for IPv6 (DHCPv6). Similar to the Dynamic Host Configuration Protocol (DHCP) for the Internet Protocol version 4 (IPv4), DHCPv6 uses a clientserver model to manage addresses in networks, providing stateful address assignment. While DHCPv6 can be configured to assign randomly distributed addresses to clients, the DHCP Unique Identifier (DUID) was designed to identify uniquely identify clients to servers and remains static to clients as they move between different subnets and networks. Since the DUID is globally unique and exposed in the clear, attackers can geotemporally track clients by sniffing DHCPv6 messages on the local network or by using unauthenticated protocol-valid queries that request systems' DUIDs or leased addresses. DUIDs can also be formed with systemspecific information, further compromising the privacy and security of the host. To combat the threat of the static DUID, a dynamic DUID was implemented and analyzed for its effect on privacy and security as well as its computational overhead. The privacy implications of DHCPv6 must be addressed before large-scale IPv6 deployment.

show abstract

Section: Dynamic Duidmentioning

confidence: 99%

Privacy and Security of DHCP Unique Identifiers

Groat¹,

Dunlop²,

Marchany³

et al. 2012

IJISR

View full text Add to dashboard Cite

show abstract

“…A PRE can communicate with multiple PAAs, and it will choose one PAA to communicate with for a given PaC. By default, the PaC discovers the PRE using the normal mechanism for PAA discovery as defined in [RFC5192]. PREs are assumed to be configured with the IP address(es) of the PAA(s).…”

Section: Pana Relay Elementmentioning

confidence: 99%