Host Identity Protocol Architecture

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 41
Abstract: This memo describes the Host Identity (HI) namespace, which provides a cryptographic namespace to applications, and the associated protocol layer, the Host Identity Protocol, located between the internetworking and transport layers, that supports end-host mobility, multihoming, and NAT traversal. Herein are presented the basics of the current namespaces, their strengths and weaknesses, and how a HI namespace will add completeness to them. The roles of the HI namespace in the protocols are defined. This document obsoletes RFC 4423 and addresses the concerns raised by the IESG, particularly that of crypto agility. The Security Considerations section also describes measures against flooding attacks, usage of identities in access control lists, weaker types of identifiers, and trust on first use. This document incorporates lessons learned from the implementations of RFC 7401 and goes further to explain how HIP works as a secure signaling channel.
Publication Date: 2021-07-01
Status Note: Informational
DOI: 10.17487/RFC9063
Link: https://doi.org/10.17487/RFC9063
Author(s): Robert Moskowitz
Miika Komu
Keyword(s): Cryptographic Identity, Cryptographic Namespace, identifier/locator Split, Mobility, Multihoming, NAT Traversal, ESP, IPv6, End-to-end Security, End-to-end Connectivity, Endpoint Identity, Leap of Faith, Rendezvous

Latest version of IETF RFC 9063

Document Versions — IETF RFC 9063

▶ IETF RFC 9063 (2021-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 5482 [Active*]
RFC6079 — RFC6079 EXTERNAL
RFC7086 — RFC7086 EXTERNAL
IETF RFC 7343 [Active*]
IETF RFC 7401 [Active*]
IETF RFC 7402 [Active*]
RFC8002 — RFC8002 EXTERNAL
RFC8003 — RFC8003 EXTERNAL
IETF RFC 8004 [Active*]
IETF RFC 8005 [Active*]
IETF RFC 8046 [Active*]
RFC8047 — RFC8047 EXTERNAL
RFC9028 — RFC9028 EXTERNAL

Bibliographic Reference(s)

10.1002-sec.1411 — hip-lte EXTERNAL
10.1007-3-540-44810-1_22 — aura-dos EXTERNAL
10.1007-3-540-45807-7_3 — Nik2001 EXTERNAL
10.1007-978-3-642-27937-9_1 — sarela-bloom EXTERNAL
10.1007-978-3-642-27937-9_3 — komu-mitigation EXTERNAL
10.1007-978-3-642-31909-9_19 — pham-leap EXTERNAL
10.1007-11915034_85 — tritilanunt-dos EXTERNAL
10.1016-j.comnet.2012.11.024 — levae-barriers EXTERNAL
10.1109-AICCSA.2009.5069337 — karvonen-usable EXTERNAL
10.1109-CCGRID.2017.62 — ranjbar-synaptic EXTERNAL
10.1109-CCNC.2007.221 — zhu-secure EXTERNAL
10.1109-CCNC.2009.4784729 — komu-leap EXTERNAL
10.1109-CCNC.2011.5766540 — camarillo-p2psip EXTERNAL
10.1109-ClusterW.2012.29 — komu-cloud EXTERNAL
10.1109-ICC.2009.5198984 — heer-end-host EXTERNAL
10.1109-ICNS.2007.66 — kovacshazi-host EXTERNAL
10.1109-IEEESTD.2020.9144691 — IEEE.802.15.4 EXTERNAL
10.1109-NCIS.2011.42 — zhu-hip EXTERNAL
10.1109-SECURECOMM.2005.53 — ylitalo-spinat EXTERNAL
10.1109-WiMOB.2013.6673370 — hummen EXTERNAL
10.1109-WOCN.2007.4284140 — urien-rfid EXTERNAL
10.1145-277697.277744 — shields-hip EXTERNAL
10.1145-1070873.1070875 — schuetz-intermittent EXTERNAL
10.4018-jdtis.2011070102 — amir-hip EXTERNAL
10.4018-jhcr.2010090905 — lindqvist-enterprise EXTERNAL
10.24138-jcomss.v6i1.193 — varjonen-split EXTERNAL
IETF.draft-heer-hip-middle-auth-04 — I-D.heer-hip-middle-auth EXTERNAL
IETF.draft-henderson-hip-vpls-11 — I-D.henderson-hip-vpls EXTERNAL
IETF.draft-ietf-hip-dex-24 — hip-dex EXTERNAL
IETF.draft-irtf-hiprg-revocation-05 — I-D.irtf-hiprg-revocation EXTERNAL
IETF.draft-irtf-hiprg-rfid-07 — I-D.irtf-hiprg-rfid EXTERNAL
IETF.draft-irtf-nsrg-report-10 — I-D.irtf-nsrg-report EXTERNAL
IETF.draft-tschofenig-hiprg-hip-srtp-02 — I-D.tschofenig-hiprg-hip-srtp EXTERNAL
ISBN.1439256047 — paine-hip EXTERNAL
ISBN.9789512295319 — ylitalo-diss EXTERNAL
ISBN.9789526049045 — komu-diss EXTERNAL
Tempered Networks, "Identity-Defined Network (IDN) Architecture: Unified, Secure Networking Made Simple", White Paper, 2016. EXTERNAL
Beal, J. and T. Shepard, "Deamplification of DoS Attacks via Puzzles", October 2004. EXTERNAL
Chiappa, J., "Endpoints and Endpoint Names: A Proposed Enhancement to the Internet Architecture", 1999, <http://mercury.lcs.mit.edu/~jnc/tech/endpoints.txt>. EXTERNAL
IEEE, "IEEE Draft Recommended Practice for Transport of Key Management Protocol (KMP) Datagrams", IEEE P802.15.9/D04, May 2015. EXTERNAL
Xin, G., "Host Identity Protocol Version 2.5", Master's Thesis, Aalto University, Espoo, Finland, June 2012. EXTERNAL
IETF RFC 2136 [Active*]
IETF RFC 2766 [Superseded*]
IETF RFC 3022 [Active*]
IETF RFC 3102 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 3972 [Active*]
IETF RFC 4033 [Active*]
IETF RFC 4225 [Active*]
IETF RFC 4380 [Active*]
IETF RFC 4423 [Superseded*]
IETF RFC 5218 [Active*]
RFC5338 — RFC5338 EXTERNAL
IETF RFC 5887 [Active*]
RFC6078 — RFC6078 EXTERNAL
RFC6250 — RFC6250 EXTERNAL
IETF RFC 6281 [Active*]
RFC6317 — RFC6317 EXTERNAL
RFC6537 — RFC6537 EXTERNAL
RFC6538 — RFC6538 EXTERNAL
IETF RFC 7296 [Active*]
IETF RFC 7435 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9063.json

Supersedes:

IETF RFC 4423 [Superseded*]

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9063, Host Identity Protocol Architecture. Available at https://doi.org/10.17487/RFC9063

Snippet:

IETF RFC 9063, Host Identity Protocol Architecture. Available at https://doi.org/10.17487/RFC9063

HTML (ISO 690 compliant)

Preview:

IETF RFC 9063, Host Identity Protocol Architecture. Available at https://doi.org/10.17487/RFC9063

Snippet:

<span class="citation"><cite>IETF RFC 9063</cite>, Host Identity Protocol Architecture. Available at <a href="https://doi.org/10.17487/RFC9063" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9063</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9063, Host Identity Protocol Architecture
doi: 10.17487/RFC9063
url: https://doi.org/10.17487/RFC9063

Snippet:

<li>
<cite id="bib-rfc9063">IETF RFC 9063</cite>, Host Identity Protocol Architecture
<span class="doi">10.17487/RFC9063</span>
</li>