<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE rfc SYSTEM "rfc2629.dtd">
<?rfc toc="yes"?>
<?rfc tocompact="yes"?>
<?rfc tocdepth="3"?>
<?rfc tocindent="yes"?>
<?rfc symrefs="yes"?>
<?rfc sortrefs="yes"?>
<?rfc comments="yes"?>
<?rfc inline="yes"?>
<?rfc compact="yes"?>
<?rfc subcompact="no"?>
<rfc category="std" docName="draft-herberg-manet-nhdp-olsrv2-sec-00" ipr="trust200902" updates="RFC6130">
	<front>
		<title abbrev="Integrity Protection for NHDP and OLSRv2">
			Integrity Protection for Control Messages in NHDP and OLSRv2
		</title>
		<author fullname="Thomas Heide Clausen" initials="T" surname="Clausen">
			<organization>LIX, Ecole Polytechnique</organization>
			<address>
				<postal>
					<street/>
					<city>91128 Palaiseau Cedex</city>
					<region/>
					<country>France</country>
				</postal>
				<phone>+33 6 6058 9349</phone>
				<email>T.Clausen@computer.org</email>
				<uri>http://www.thomasclausen.org/</uri>
			</address>
		</author>
		<author initials="C.M." surname="Dearlove" fullname="Christopher Dearlove">
			<organization>BAE Systems ATC</organization>
			<address>
       			<phone>+44 1245 242194</phone>
        		<email>chris.dearlove@baesystems.com</email>
        		<uri>http://www.baesystems.com/</uri>
      		</address>
		</author>
		<author fullname="Ulrich Herberg" initials="U" surname="Herberg">
			<organization>Fujitsu Laboratories of America</organization>
			<address>
				<postal>
					<street>1240 E. Arques Ave.</street>
					<city>Sunnyvale, CA, 94085</city>
					<region/>
					<country>USA</country>
				</postal>
				<email>ulrich@herberg.name</email>
				<uri>http://www.herberg.name/</uri>
			</address>
		</author>
		
		<date/>
		<area/>
		<workgroup>Mobile Ad hoc Networking (MANET)</workgroup>
		<keyword>MANET</keyword>
		<keyword>OLSRv2</keyword>
		<keyword>Security</keyword>
		<keyword>Integrity protection</keyword>
		<keyword>ICV</keyword>
		<abstract>
			<t>
				This document specifies integrity and replay protection for required implementation in the MANET Neighborhood Discovery Protocol (NHDP) and the Optimized Link State Routing Protocol version 2 (OLSRv2). This document specifies how an integrity check value (ICV) and a timestamp may be included as TLVs (defined in <xref target="RFC6622bis"/>) in NHDP's and OLSRv2's control messages, countering a number of security threats to NHDP and to OLSRv2. The ICV TLV uses a SHA-256 based HMAC and a single shared secret key. The timestamp TLV is based on POSIX time, assuming router synchronization. The mechanism in this specification can also be used for other MANET protocols using RFC5444.
			</t>
		</abstract>
	</front>
	<middle>
		<?rfc include='introduction'?>
    		<?rfc include='terminology'?>
		<?rfc include='applicability'?>
		<?rfc include='overview_and_functioning'?>
		<?rfc include='parameters'?>
		<?rfc include='messages'?>
		<?rfc include='preconditions'?>
		<?rfc include='IANA'?>
		<?rfc include='security_considerations'?>
	</middle>
	<back>
		<?rfc include='references'?>
	</back>
</rfc>
