API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7401
[ACTIVE]

Host Identity Protocol Version 2 (HIPv2)

Metadata

Publisher
IETF
Doc Type
Standard
Pages
128
Abstract
This document specifies the details of the Host Identity Protocol (HIP). HIP allows consenting hosts to securely establish and maintain shared IP-layer state, allowing separation of the identifier and locator roles of IP addresses, thereby enabling continuity of communications across IP address changes. HIP is based on a Diffie-Hellman key exchange, using public key identifiers from a new Host Identity namespace for mutual peer authentication. The protocol is designed to be resistant to denial-of-service (DoS) and man-in-the-middle (MitM) attacks. When used together with another suitable security protocol, such as the Encapsulating Security Payload (ESP), it provides integrity protection and optional encryption for upper-layer protocols, such as TCP and UDP. This document obsoletes RFC 5201 and addresses the concerns raised by the IESG, particularly that of crypto agility. It also incorporates lessons learned from the implementations of RFC 5201.
Publication Date
2015-04-01
Status Note
Proposed Standard
DOI
10.17487/RFC7401
Link
https://doi.org/10.17487/RFC7401
Author(s)
Robert Moskowitz
Tobias Heer
Petri Laari
Thomas R. Henderson
Keyword(s)
HIP, Integrity
Latest version of IETF RFC 7401

Document Versions — IETF RFC 7401

  • ▶ IETF RFC 7401 (2015-04-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • IETF.draft-ietf-hip-rfc4423-bis-09 — HIP-ARCH EXTERNAL
  • IETF.draft-ietf-hip-rfc5204-bis-05 — HIP-REND-EXT EXTERNAL
  • IETF.draft-ietf-hip-rfc5205-bis-06 — HIP-DNS-EXT EXTERNAL
  • IETF.draft-ietf-hip-rfc5206-bis-08 — HIP-HOST-MOB EXTERNAL
  • NIST FIPS 186-4 [Active]
  • NIST FIPS 197 [Superseded]
  • Diffie, W. and M. Hellman, "New Directions in Cryptography", IEEE Transactions on Information Theory Volume IT-22, Number 6, pages 644-654, November 1976. EXTERNAL
  • Crosby, S. and D. Wallach, "Denial of Service via Algorithmic Complexity Attacks", in Proceedings of the 12th USENIX Security Symposium, Washington, D.C., August 2003. EXTERNAL
  • Krawczyk, H., "SIGMA: The 'SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and Its Use in the IKE Protocols", in Proceedings of CRYPTO 2003, pages 400-425, August 2003. EXTERNAL
  • Aura, T., Nagarajan, A., and A. Gurtov, "Analysis of the HIP Base Exchange Protocol", in Proceedings of the 10th Australasian Conference on Information Security and Privacy, July 2005. EXTERNAL
  • Rivest, R., Shamir, A., and L. Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", Communications of the ACM 21 (2), pp. 120-126, February 1978. EXTERNAL
  • Kaufman, C., Perlman, R., and B. Sommerfeld, "DoS protection for UDP-based protocols", in Proceedings of the 10th ACM Conference on Computer and Communications Security, October 2003. EXTERNAL
  • IETF RFC 792 [Active*]
  • IETF RFC 2785 [Active*]
  • IETF RFC 2898 [Superseded*]
  • IETF RFC 3447 [Superseded*]
  • IETF RFC 3849 [Active*]
  • IETF RFC 4423 [Superseded*]
  • IETF RFC 5201 [Superseded*]
  • IETF RFC 5204 [Superseded*]
  • IETF RFC 5205 [Superseded*]
  • IETF RFC 5206 [Superseded*]
  • IETF RFC 5226 [Superseded*]
  • RFC5338 — RFC5338 EXTERNAL
  • IETF RFC 5533 [Active*]
  • IETF RFC 5737 [Active*]
  • IETF RFC 5869 [Active*]
  • IETF RFC 5903 [Active*]
  • IETF RFC 6090 [Active*]
  • IETF RFC 6253 [Superseded*]
  • IETF RFC 7045 [Active*]
  • IETF RFC 7296 [Active*]
  • SECG.SEC2.v2.2010-01 — SECG EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7401.json

Supersedes:
IETF RFC 5201 [Superseded*]
Amended by:
RFC8002 — RFC8002 EXTERNAL
RFC9374 NOT IN REGISTRY

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7401, Host Identity Protocol Version 2 (HIPv2). Available at https://doi.org/10.17487/RFC7401
Snippet:
IETF RFC 7401, Host Identity Protocol Version 2 (HIPv2). Available at https://doi.org/10.17487/RFC7401

HTML (ISO 690 compliant)

Preview:
IETF RFC 7401, Host Identity Protocol Version 2 (HIPv2). Available at https://doi.org/10.17487/RFC7401
Snippet:
<span class="citation"><cite>IETF RFC 7401</cite>, Host Identity Protocol Version 2 (HIPv2). Available at <a href="https://doi.org/10.17487/RFC7401" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7401</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7401, Host Identity Protocol Version 2 (HIPv2)
doi: 10.17487/RFC7401
url: https://doi.org/10.17487/RFC7401
Snippet:
<li>
<cite id="bib-rfc7401">IETF RFC 7401</cite>, Host Identity Protocol Version 2 (HIPv2)
<span class="doi">10.17487/RFC7401</span>
</li>

Referenced By