IETF RFC 9414
[ACTIVE]
Unfortunate History of Transient Numeric Identifiers
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 27
- Abstract
- This document analyzes the timeline of the specification and implementation of different types of "transient numeric identifiers" used in IETF protocols and how the security and privacy properties of such protocols have been affected as a result of it. It provides empirical evidence that advice in this area is warranted. This document is a product of the Privacy Enhancements and Assessments Research Group (PEARG) in the IRTF.
- Publication Date
- 2023-07-01
- Status Note
- Informational
- DOI
10.17487/RFC9414- Link
- https://doi.org/10.17487/RFC9414
- Author(s)
- Fernando GontIvan Arce
- Keyword(s)
- Security, Vulnerability, Algorithm, Fingerprinting
Latest version of IETF RFC 9414
Document Versions — IETF RFC 9414
-
▶ IETF RFC 9414 (2023-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 768 [Active*]
- IETF RFC 791 [Active*]
- IETF RFC 793 [Superseded*]
- IETF RFC 1323 [Superseded*]
- IETF RFC 1883 [Superseded*]
- IETF RFC 1884 [Superseded*]
- IETF RFC 2073 [Superseded*]
- IETF RFC 2374 [Superseded*]
- IETF RFC 2460 [Superseded*]
- IETF RFC 3041 [Superseded*]
- IETF RFC 3587 [Active*]
- IETF RFC 4291 [Active*]
- IETF RFC 4862 [Active*]
- IETF RFC 4941 [Superseded*]
- IETF RFC 5452 [Active*]
- IETF RFC 6056 [Active*]
- IETF RFC 6528 [Superseded*]
- IETF RFC 7217 [Active*]
- IETF RFC 7323 [Active*]
- IETF RFC 8200 [Active*]
- IETF RFC 8415 [Superseded*]
- IETF RFC 9293 [Active*]
Bibliographic Reference(s)
- 10.1145-637201.637243 — Bellovin2002 EXTERNAL
- 10.48550-arXiv.1906.10478 — IPID-DEV EXTERNAL
- IETF.draft-cooper-6man-ipv6-address-generation-privacy-00 — draft-cooper-6man-ipv6-address-generation-privacy-00 EXTERNAL
- IETF.draft-eddy-rfc793bis-04 — draft-eddy-rfc793bis-04 EXTERNAL
- IETF.draft-fgont-6man-rfc4941bis-00 — draft-fgont-6man-rfc4941bis-00 EXTERNAL
- IETF.draft-gont-6man-address-usage-recommendations-00 — draft-gont-6man-address-usage-recommendations-00 EXTERNAL
- IETF.draft-gont-6man-non-stable-iids-00 — draft-gont-6man-non-stable-iids-00 EXTERNAL
- IETF.draft-gont-6man-predictable-fragment-id-00 — draft-gont-6man-predictable-fragment-id-00 EXTERNAL
- IETF.draft-gont-6man-predictable-fragment-id-03 — draft-gont-6man-predictable-fragment-id-03 EXTERNAL
- IETF.draft-gont-6man-stable-privacy-addresses-00 — draft-gont-6man-stable-privacy-addresses-00 EXTERNAL
- IETF.draft-gont-6man-stable-privacy-addresses-01 — draft-gont-6man-stable-privacy-addresses-01 EXTERNAL
- IETF.draft-gont-ntp-port-randomization-00 — draft-gont-ntp-port-randomization-00 EXTERNAL
- IETF.draft-gont-ntp-port-randomization-01 — NTP-PORTR EXTERNAL
- IETF.draft-gont-opsec-ipv6-host-scanning-02 — draft-gont-opsec-ipv6-host-scanning-02 EXTERNAL
- IETF.draft-gont-predictable-numeric-ids-03 — draft-gont-predictable-numeric-ids-03 EXTERNAL
- IETF.draft-ietf-6man-default-iids-00 — draft-ietf-6man-default-iids-00 EXTERNAL
- IETF.draft-ietf-6man-default-iids-16 — draft-ietf-6man-default-iids-16 EXTERNAL
- IETF.draft-ietf-6man-ipv6-address-generation-privacy-08 — draft-ietf-6man-ipv6-address-generation-privacy-08 EXTERNAL
- IETF.draft-ietf-6man-predictable-fragment-id-00 — draft-ietf-6man-predictable-fragment-id-00 EXTERNAL
- IETF.draft-ietf-6man-predictable-fragment-id-01 — draft-ietf-6man-predictable-fragment-id-01 EXTERNAL
- IETF.draft-ietf-6man-predictable-fragment-id-02 — draft-ietf-6man-predictable-fragment-id-02 EXTERNAL
- IETF.draft-ietf-6man-predictable-fragment-id-08 — draft-ietf-6man-predictable-fragment-id-08 EXTERNAL
- IETF.draft-ietf-6man-predictable-fragment-id-10 — draft-ietf-6man-predictable-fragment-id-10 EXTERNAL
- IETF.draft-ietf-6man-rfc2460bis-05 — draft-ietf-6man-rfc2460bis-05 EXTERNAL
- IETF.draft-ietf-6man-rfc2460bis-13 — draft-ietf-6man-rfc2460bis-13 EXTERNAL
- IETF.draft-ietf-6man-rfc4941bis-00 — draft-ietf-6man-rfc4941bis-00 EXTERNAL
- IETF.draft-ietf-6man-rfc4941bis-12 — draft-ietf-6man-rfc4941bis-12 EXTERNAL
- IETF.draft-ietf-6man-stable-privacy-addresses-00 — draft-ietf-6man-stable-privacy-addresses-00 EXTERNAL
- IETF.draft-ietf-6man-stable-privacy-addresses-17 — draft-ietf-6man-stable-privacy-addresses-17 EXTERNAL
- IETF.draft-ietf-ntp-port-randomization-00 — draft-ietf-ntp-port-randomization-00 EXTERNAL
- IETF.draft-ietf-ntp-port-randomization-08 — draft-ietf-ntp-port-randomization-08 EXTERNAL
- IETF.draft-ietf-ntp-refid-updates-00 — draft-ietf-ntp-refid-updates-00 EXTERNAL
- IETF.draft-ietf-ntp-refid-updates-05 — Gont-NTP EXTERNAL
- IETF.draft-ietf-opsec-ipv6-host-scanning-08 — draft-ietf-opsec-ipv6-host-scanning-08 EXTERNAL
- IETF.draft-stenn-ntp-not-you-refid-00 — draft-stenn-ntp-not-you-refid-00 EXTERNAL
- Silbersack, M., "Improving TCP/IP security through randomization without sacrificing interoperability", EuroBSDCon 2005 Conference, January 2005, <https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.91.4542&rep=rep1&type=pdf>. EXTERNAL
- CERT/CC, "Multiple DNS implementations vulnerable to cache poisoning", Vulnerability Note VU#800113, July 2008, <https://www.kb.cert.org/vuls/id/800113>. EXTERNAL
- Klein, A., "Windows DNS Server Cache Poisoning", March 2007, <https://dl.packetstormsecurity.net/papers/attack/Windows_DNS_Cache_Poisoning.pdf>. EXTERNAL
- OpenBSD, "Randomization of the IPv4 Identification field", December 1998, <https://cvsweb.openbsd.org/src/sys/netinet/ip_id.c?rev=1.1>. EXTERNAL
- Bellovin, S., "Security Problems in the TCP/IP Protocol Suite", Computer Communications Review, vol. 19, no. 2, pp. 32-48, April 1989, <https://www.cs.columbia.edu/~smb/papers/ipext.pdf>. EXTERNAL
- Zalewski, M., "A new TCP/IP blind data injection technique?", December 2003, <https://lcamtuf.coredump.cx/ipfrag.txt>. EXTERNAL
- Economou, N., "Windows SMTP Service DNS query Id vulnerabilities", Advisory ID Internal CORE-2010-0427, May 2010, <https://www.coresecurity.com/core-labs/advisories/core-2010-0424-windows-smtp-dns-query-id-bugs>. EXTERNAL
- IANA, "Protocol Registries", <https://www.iana.org/protocols>. EXTERNAL
- Kaminsky, D., "Black Ops 2008: It's The End Of The Cache As We Know It", August 2008, <https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Kaminsky/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf>. EXTERNAL
- Schuba, C., "Addressing Weakness in the Domain Name System Protocol", August 1993, <http://ftp.cerias.purdue.edu/pub/papers/christoph-schuba/schuba-DNS-msthesis.pdf>. EXTERNAL
- Sacramento, V., "CAIS-ALERT: Vulnerability in the sending requests control of BIND", message to the Bugtraq mailing list, 25 November 2002, <https://seclists.org/bugtraq/2002/Nov/331>. EXTERNAL
- OpenBSD, "Implementation of port randomization", July 1996, <https://cvsweb.openbsd.org/src/sys/netinet/in_pcb.c?rev=1.6>. EXTERNAL
- Gont, F., "Beta release of the SI6 Network's IPv6 Toolkit (help wanted!)", message to the IPv6 Hackers mailing list, 11 February 2013, <https://lists.si6networks.com/pipermail/ipv6hackers/2013-February/000947.html>. EXTERNAL
- Sanfilippo, S., "about the ip header id", message to the Bugtraq mailing list, 14 December 1998, <http://seclists.org/bugtraq/1998/Dec/48>. EXTERNAL
- Shimomura, T., "Technical details of the attack described by Markoff in NYT", message to the USENET comp.security.misc newsgroup, 25 January 1995, <https://www.gont.com.ar/files/post-shimomura-usenet.txt>. EXTERNAL
- Arce, I. and E. Kargieman, "BIND Vulnerabilities and Solutions", April 1997, <http://www.openbsd.org/advisories/sni_12_resolverid.txt>. EXTERNAL
- Meissner, M., "[security-announce] SUSE Security Announcement: Linux kernel security update (SUSE-SA:2011:046)", message to the openSUSE Security Announce mailing list, 13 December 2011, <https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html>. EXTERNAL
- OpenBSD, "Implementation of TCP ISN randomization based on simple randomization", December 2000, <https://cvsweb.openbsd.org/src/sys/netinet/tcp_subr.c?rev=1.37>. EXTERNAL
- Fyodor, "Idle scanning and related IP ID games", September 2002, <https://nmap.org/presentations/CanSecWest03/CD_Content/idlescan_paper/idlescan.html>. EXTERNAL
- Wright, G. and W. Stevens, "TCP/IP Illustrated, Volume 2: The Implementation", Addison-Wesley, February 1995. EXTERNAL
- Gont, F., "Hacking IPv6 Networks (training course)", Hack In Paris 2011 Conference, Paris, France, June 2011, <https://www.si6networks.com/files/presentations/hip2011/fgont-hip2011-hacking-ipv6-networks.pdf>. EXTERNAL
- OpenBSD, "Randomization of the IPv6 Identification field", October 2003, <https://cvsweb.openbsd.org/src/sys/netinet6/ip6_id.c?rev=1.1>. EXTERNAL
- Klein, A., "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability", October 2007, <https://dl.packetstormsecurity.net/papers/attack/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf>. EXTERNAL
- Vixie, P., "DNS and BIND Security Issues", 5th Usenix Security Symposium, June 1995, <https://www.usenix.org/legacy/publications/library/proceedings/security95/full_papers/vixie.pdf>. EXTERNAL
- Sanfilippo, S., "new tcp scan method", message to the Bugtraq mailing list, 18 December 1998, <https://seclists.org/bugtraq/1998/Dec/79>. EXTERNAL
- Ubuntu, "USN-1253-1: Linux kernel vulnerabilities", November 2011, <https://ubuntu.com/security/notices/USN-1253-1>. EXTERNAL
- Zalewski, M., "Strange Attractors and TCP/IP Sequence Number Analysis (2001)", March 2001, <https://lcamtuf.coredump.cx/oldtcp/tcpseq.html>. EXTERNAL
- CERT CC, "Multiple TCP/IP implementations may use statistically predictable initial sequence numbers", Vulnerability Note VU#498440, March 2001, <https://www.kb.cert.org/vuls/id/498440>. EXTERNAL
- Sanfilippo, S., "more ip id", message to the Bugtraq mailing list, November 1999, <https://github.com/antirez/hping/raw/master/docs/MORE-FUN-WITH-IPID>. EXTERNAL
- Sherman, J. and J. Levine, "Usage Analysis of the NIST Internet Time Service", Journal of Research of the National Institute of Standards and Technology, Volume 121, March 2016, <https://tf.nist.gov/general/pdf/2818.pdf>. EXTERNAL
- Klein, A., "BIND 9 DNS Cache Poisoning", March 2007, <https://citeseerx.ist.psu.edu/doc/10.1.1.86.4474>. EXTERNAL
- Morbitzer, M., "[PATCH] TCP Idle Scan in IPv6", message to the nmap-dev mailing list, 3 June 2013, <https://seclists.org/nmap-dev/2013/q2/394>. EXTERNAL
- Morris, R., "A Weakness in the 4.2BSD UNIX TCP/IP Software", CSTR 117, AT&T Bell Laboratories, Murray Hill, NJ, February 1985, <https://pdos.csail.mit.edu/~rtm/papers/117.pdf>. EXTERNAL
- CERT/CC, "CERT Advisory CA-2001-09: Statistical Weaknesses in TCP/IP Initial Sequence Numbers", May 2001, <https://resources.sei.cmu.edu/asset_files/WhitePaper/2001_019_001_496192.pdf>. EXTERNAL
- Zalewski, M., "Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later (2002)", 2002, <https://lcamtuf.coredump.cx/newtcp/>. EXTERNAL
- Red Hat, "RHSA-2011:1465-1 - Security Advisory", November 2011, <https://rhn.redhat.com/errata/RHSA-2011-1465.html>. EXTERNAL
- Gont, F., "Recent Advances in IPv6 Security", BSDCan 2012 Conference, Ottawa, Canada, May 2012, <https://www.si6networks.com/files/presentations/bsdcan2012/fgont-bsdcan2012-recent-advances-in-ipv6-security.pdf>. EXTERNAL
- OpenBSD, "Implementation of TCP ISN randomization based on random increments", July 1996, <https://cvsweb.openbsd.org/src/sys/netinet/tcp_subr.c?rev=1.6>. EXTERNAL
- McDanel, B., "TCP Timestamping - Obtaining System Uptime Remotely", message to the Bugtraq mailing list, March 2001, <https://seclists.org/bugtraq/2001/Mar/182>. EXTERNAL
- SI6 Networks, "IPv6 Toolkit", <https://www.si6networks.com/tools/ipv6toolkit>. EXTERNAL
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 1948 [Superseded*]
- IETF RFC 5157 [Superseded*]
- IETF RFC 5905 [Active*]
- IETF RFC 6274 [Active*]
- IETF RFC 7258 [Active*]
- IETF RFC 7707 [Active*]
- IETF RFC 7721 [Active*]
- IETF RFC 7739 [Active*]
- IETF RFC 8064 [Active*]
- IETF RFC 8981 [Active*]
- IETF RFC 9109 [Active*]
- IETF RFC 9415 [Active*]
- IETF RFC 9416 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9414.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9414, Unfortunate History of Transient Numeric Identifiers. Available at https://doi.org/10.17487/RFC9414
Snippet:
IETF RFC 9414, Unfortunate History of Transient Numeric Identifiers. Available at https://doi.org/10.17487/RFC9414
HTML (ISO 690 compliant)
Preview:
IETF RFC 9414, Unfortunate History of Transient Numeric Identifiers. Available at https://doi.org/10.17487/RFC9414
Snippet:
<span class="citation"><cite>IETF RFC 9414</cite>, Unfortunate History of Transient Numeric Identifiers. Available at <a href="https://doi.org/10.17487/RFC9414" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9414</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9414, Unfortunate History of Transient Numeric Identifiers
doi: 10.17487/RFC9414
url: https://doi.org/10.17487/RFC9414
doi: 10.17487/RFC9414
url: https://doi.org/10.17487/RFC9414
Snippet:
<li> <cite id="bib-rfc9414">IETF RFC 9414</cite>, Unfortunate History of Transient Numeric Identifiers <span class="doi">10.17487/RFC9414</span> </li>
Referenced By
- IETF RFC 9415 [Active*]
- IETF RFC 9416 [Active*]