Host Identity Protocol
Metadata
- Publisher
- IETF
- Doc Type
- Experimental
- Pages
- 104
- Abstract
- This memo specifies the details of the Host Identity Protocol (HIP). HIP allows consenting hosts to securely establish and maintain shared IP-layer state, allowing separation of the identifier and locator roles of IP addresses, thereby enabling continuity of communications across IP address changes. HIP is based on a Sigma-compliant Diffie- Hellman key exchange, using public key identifiers from a new Host Identity namespace for mutual peer authentication. The protocol is designed to be resistant to denial-of-service (DoS) and man-in-the- middle (MitM) attacks. When used together with another suitable security protocol, such as the Encapsulated Security Payload (ESP), it provides integrity protection and optional encryption for upper- layer protocols, such as TCP and UDP. This memo defines an Experimental Protocol for the Internet community.
- Publication Date
- 2008-04-01
- Status Note
- Experimental
- DOI
10.17487/RFC5201- Link
- https://doi.org/10.17487/RFC5201
- Author(s)
- Robert MoskowitzPekka NikanderPetri LaariTom Henderson
- Keyword(s)
- HIP, Integrity
Latest version of IETF RFC 5201
Document Versions — IETF RFC 5201
-
▶ IETF RFC 5201 (2008-04-01)THIS DOC [SUPERSEDED] [LATEST VERSION]
Normative Reference(s)
- NIST FIPS 180-1 [Withdrawn]
- IETF RFC 768 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2404 [Active*]
- IETF RFC 2451 [Active*]
- IETF RFC 2460 [Superseded*]
- IETF RFC 2463 [Superseded*]
- IETF RFC 2536 [Active*]
- IETF RFC 2898 [Superseded*]
- IETF RFC 3110 [Active*]
- IETF RFC 3484 [Superseded*]
- IETF RFC 3526 [Active*]
- IETF RFC 3602 [Active*]
- IETF RFC 3972 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4282 [Superseded*]
- IETF RFC 4307 [Superseded*]
- IETF RFC 4843 [Superseded*]
- IETF RFC 5202 [Superseded*]
Bibliographic Reference(s)
- NIST FIPS 197 [Superseded]
- Kaufman, C., Perlman, R., and B. Sommerfeld, "DoS protection for UDP-based protocols", ACM Conference on Computer and Communications Security , Oct 2003. EXTERNAL
- Diffie, W. and M. Hellman, "New Directions in Cryptography", IEEE Transactions on Information Theory vol. IT-22, number 6, pages 644-654, Nov 1976. EXTERNAL
- Crosby, SA. and DS. Wallach, "Denial of Service via Algorithmic Complexity Attacks", in Proceedings of Usenix Security Symposium 2003, Washington, DC., August 2003. EXTERNAL
- Richardson, M., Williams, N., Komu, M., and S. Tarkoma, "IPsec Application Programming Interfaces", Work in Progress, February 2008. EXTERNAL
- Aura, T., Nagarajan, A., and A. Gurtov, "Analysis of the HIP Base Exchange Protocol", in Proceedings of 10th Australasian Conference on Information Security and Privacy, July 2003. EXTERNAL
- Krawczyk, H., "SIGMA: The 'SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and Its Use in the IKE- Protocols", in Proceedings of CRYPTO 2003, pages 400- 425, August 2003. EXTERNAL
- Nordmark, E. and M. Bagnulo, "Shim6: Level 3 Multihoming Shim Protocol for IPv6", Work in Progress, February 2008. EXTERNAL
- Henderson, T., Nikander, P., and M. Komu, "Using the Host Identity Protocol with Legacy Applications", Work in Progress, November 2007. EXTERNAL
- IETF RFC 792 [Active*]
- IETF RFC 2412 [Active*]
- IETF RFC 2434 [Superseded*]
- IETF RFC 4306 [Superseded*]
- IETF RFC 4423 [Superseded*]
- IETF RFC 5204 [Superseded*]
- IETF RFC 5205 [Superseded*]
- IETF RFC 5206 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5201.json
Amended by:
RFC6253 NOT IN REGISTRY
Superseded by:
RFC7401 NOT IN REGISTRY
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5201, Host Identity Protocol. Available at https://doi.org/10.17487/RFC5201
Snippet:
IETF RFC 5201, Host Identity Protocol. Available at https://doi.org/10.17487/RFC5201
HTML (ISO 690 compliant)
Preview:
IETF RFC 5201, Host Identity Protocol. Available at https://doi.org/10.17487/RFC5201
Snippet:
<span class="citation"><cite>IETF RFC 5201</cite>, Host Identity Protocol. Available at <a href="https://doi.org/10.17487/RFC5201" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5201</a></span>
SMPTE's HTML Pub
Preview:
Snippet:
<li> <cite id="bib-rfc5201">IETF RFC 5201</cite>, Host Identity Protocol <span class="doi">10.17487/RFC5201</span> </li>
Referenced By
- IETF RFC 5202 [Superseded*]
- IETF RFC 5204 [Superseded*]
- IETF RFC 5205 [Superseded*]
- IETF RFC 5206 [Superseded*]
- IETF RFC 5207 [Active*]
- IETF RFC 5387 [Active*]
- IETF RFC 5533 [Active*]
- IETF RFC 5687 [Active*]
- IETF RFC 6071 [Active*]
- IETF RFC 6092 [Active*]
- IETF RFC 6115 [Active*]
- IETF RFC 6709 [Active*]
- IETF RFC 7045 [Active*]