Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 25
Abstract: This specification presents an optional method to add integrity protection directly to the Network Service Header (NSH) used for Service Function Chaining (SFC). Also, this specification allows for the encryption of sensitive metadata (MD) that is carried in the NSH.
Publication Date: 2021-12-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9145
Link: https://doi.org/10.17487/RFC9145
Author(s): Mohamed Boucadair
Tirumaleswar Reddy.K
Dan Wing
Keyword(s): Security, Resilience, Automation, Service Delivery, DiffServ, Traffic Engineering, Attack Mitigation

Latest version of IETF RFC 9145

Document Versions — IETF RFC 9145

▶ IETF RFC 9145 (2021-12-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST.SP.800-38D — GCM EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 4107 [Active*]
IETF RFC 4868 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 7665 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8300 [Active*]

Bibliographic Reference(s)

IETF.draft-arkko-farrell-arch-model-t-04 — I-D.arkko-farrell-arch-model-t EXTERNAL
IETF.draft-ietf-intarea-tunnels-10 — I-D.ietf-intarea-tunnels EXTERNAL
IETF.draft-irtf-cfrg-aead-limits-03 — I-D.irtf-cfrg-aead-limits EXTERNAL
IETF.draft-nguyen-sfc-security-architecture-00 — I-D.nguyen-sfc-security-architecture EXTERNAL
IETF RFC 4046 [Active*]
IETF RFC 5905 [Active*]
IETF RFC 6973 [Active*]
IETF RFC 7258 [Active*]
IETF RFC 7498 [Active*]
IETF RFC 7635 [Active*]
IETF RFC 8165 [Active*]
IETF RFC 8459 [Active*]
IETF RFC 8633 [Active*]
IETF RFC 8877 [Active*]
IETF RFC 8915 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9145.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9145, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers. Available at https://doi.org/10.17487/RFC9145

Snippet:

IETF RFC 9145, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers. Available at https://doi.org/10.17487/RFC9145

HTML (ISO 690 compliant)

Preview:

IETF RFC 9145, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers. Available at https://doi.org/10.17487/RFC9145

Snippet:

<span class="citation"><cite>IETF RFC 9145</cite>, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers. Available at <a href="https://doi.org/10.17487/RFC9145" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9145</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9145, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers
doi: 10.17487/RFC9145
url: https://doi.org/10.17487/RFC9145

Snippet:

<li>
<cite id="bib-rfc9145">IETF RFC 9145</cite>, Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers
<span class="doi">10.17487/RFC9145</span>
</li>

Referenced By

IETF RFC 9263 [Active*]
IETF RFC 9451 [Active*]