Security Considerations for Transient Numeric Identifiers Employed in Network Protocols

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 10
Abstract: Poor selection of transient numerical identifiers in protocols such as the TCP/IP suite has historically led to a number of attacks on implementations, ranging from Denial of Service (DoS) or data injection to information leakages that can be exploited by pervasive monitoring. Due diligence in the specification of transient numeric identifiers is required even when cryptographic techniques are employed, since these techniques might not mitigate all the associated issues. This document formally updates RFC 3552, incorporating requirements for transient numeric identifiers, to prevent flaws in future protocols and implementations.
Publication Date: 2023-07-01
Status Note: Best Current Practice
DOI: 10.17487/RFC9416
Link: https://doi.org/10.17487/RFC9416
Author(s): Fernando Gont
Ivan Arce
Keyword(s): Security, Vulnerability, Algorithm, Fingerprinting

Latest version of IETF RFC 9416

Document Versions — IETF RFC 9416

▶ IETF RFC 9416 (2023-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3552 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

IETF.draft-gont-predictable-numeric-ids-03 — I-D.gont-predictable-numeric-ids EXTERNAL
Sanfilippo, S., "about the ip header id", message to the Bugtraq mailing list, December 1998, <https://seclists.org/bugtraq/1998/Dec/48>. EXTERNAL
Bellovin, S., "Security Problems in the TCP/IP Protocol Suite", Computer Communications Review, vol. 19, no. 2, pp. 32-48, April 1989, <https://www.cs.columbia.edu/~smb/papers/ipext.pdf>. EXTERNAL
IANA, "Protocol Registries", <https://www.iana.org/protocols>. EXTERNAL
Schuba, C., "Addressing Weakness in the Domain Name System Protocol", August 1993, <http://ftp.cerias.purdue.edu/pub/papers/christoph-schuba/schuba-DNS-msthesis.pdf>. EXTERNAL
Klein, A., "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability", October 2007, <https://dl.packetstormsecurity.net/papers/attack/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf>. EXTERNAL
Shostack, A., "Threat Modeling: Designing for Security", Wiley, 1st edition, February 2014. EXTERNAL
Silbersack, M., "Improving TCP/IP security through randomization without sacrificing interoperability", EuroBSDCon 2005 Conference, January 2005, <http://www.silby.com/eurobsdcon05/eurobsdcon_silbersack.pdf>. EXTERNAL
Morris, R., "A Weakness in the 4.2BSD UNIX TCP/IP Software", CSTR 117, AT&T Bell Laboratories, Murray Hill, NJ, February 1985, <https://pdos.csail.mit.edu/~rtm/papers/117.pdf>. EXTERNAL
McDanel, B., "TCP Timestamping - Obtaining System Uptime Remotely", message to the Bugtraq mailing list, March 2001, <https://seclists.org/bugtraq/2001/Mar/182>. EXTERNAL
IETF RFC 791 [Active*]
IETF RFC 793 [Superseded*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 2460 [Superseded*]
IETF RFC 4291 [Active*]
IETF RFC 5905 [Active*]
RFC6056 — RFC6056 EXTERNAL
RFC6274 — RFC6274 EXTERNAL
IETF RFC 6528 [Superseded*]
IETF RFC 7217 [Active*]
IETF RFC 7258 [Active*]
IETF RFC 7323 [Active*]
RFC7707 — RFC7707 EXTERNAL
RFC7721 — RFC7721 EXTERNAL
RFC7739 — RFC7739 EXTERNAL
IETF RFC 8200 [Active*]
IETF RFC 9293 [Active*]
RFC9414 — RFC9414 EXTERNAL
RFC9415 — RFC9415 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9416.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9416, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols. Available at https://doi.org/10.17487/RFC9416

Snippet:

IETF RFC 9416, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols. Available at https://doi.org/10.17487/RFC9416

HTML (ISO 690 compliant)

Preview:

IETF RFC 9416, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols. Available at https://doi.org/10.17487/RFC9416

Snippet:

<span class="citation"><cite>IETF RFC 9416</cite>, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols. Available at <a href="https://doi.org/10.17487/RFC9416" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9416</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9416, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols
doi: 10.17487/RFC9416
url: https://doi.org/10.17487/RFC9416

Snippet:

<li>
<cite id="bib-rfc9416">IETF RFC 9416</cite>, Security Considerations for Transient Numeric Identifiers Employed in Network Protocols
<span class="doi">10.17487/RFC9416</span>
</li>