Security Extension for OSPFv2 When Using Manual Key Management

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 14
Abstract: The current OSPFv2 cryptographic authentication mechanism as defined in RFCs 2328 and 5709 is vulnerable to both inter-session and intra- session replay attacks when using manual keying. Additionally, the existing cryptographic authentication mechanism does not cover the IP header. This omission can be exploited to carry out various types of attacks. This document defines changes to the authentication sequence number mechanism that will protect OSPFv2 from both inter-session and intra- session replay attacks when using manual keys for securing OSPFv2 protocol packets. Additionally, we also describe some changes in the cryptographic hash computation that will eliminate attacks resulting from OSPFv2 not protecting the IP header.
Publication Date: 2015-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7474
Link: https://doi.org/10.17487/RFC7474
Author(s): Manav Bhatia
Sam Hartman
Dacheng Zhang
Acee Lindem
Keyword(s): OSPF, Authentication, Security, Replay Attacks

Latest version of IETF RFC 7474

Document Versions — IETF RFC 7474

▶ IETF RFC 7474 (2015-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2328 [Active*]
IETF RFC 5709 [Active*]

Bibliographic Reference(s)

NIST FIPS 198 [Withdrawn]
IETF RFC 2104 [Active, Amended*]
IETF RFC 3414 [Active*]
RFC4222 — RFC4222 EXTERNAL
IETF RFC 4822 [Active*]
RFC5310 — RFC5310 EXTERNAL
RFC6039 — RFC6039 EXTERNAL
RFC6094 — RFC6094 EXTERNAL
RFC6506 — RFC6506 EXTERNAL
IETF RFC 6549 [Active*]
RFC6862 — RFC6862 EXTERNAL
RFC6863 — RFC6863 EXTERNAL
RFC7210 — RFC7210 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7474.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7474, Security Extension for OSPFv2 When Using Manual Key Management. Available at https://doi.org/10.17487/RFC7474

Snippet:

IETF RFC 7474, Security Extension for OSPFv2 When Using Manual Key Management. Available at https://doi.org/10.17487/RFC7474

HTML (ISO 690 compliant)

Preview:

IETF RFC 7474, Security Extension for OSPFv2 When Using Manual Key Management. Available at https://doi.org/10.17487/RFC7474

Snippet:

<span class="citation"><cite>IETF RFC 7474</cite>, Security Extension for OSPFv2 When Using Manual Key Management. Available at <a href="https://doi.org/10.17487/RFC7474" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7474</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7474, Security Extension for OSPFv2 When Using Manual Key Management
doi: 10.17487/RFC7474
url: https://doi.org/10.17487/RFC7474

Snippet:

<li>
<cite id="bib-rfc7474">IETF RFC 7474</cite>, Security Extension for OSPFv2 When Using Manual Key Management
<span class="doi">10.17487/RFC7474</span>
</li>

Referenced By

IETF RFC 9355 [Active*]