mipshop-13----Page:3
1 2 3 4 5 6 7 8 9 10
|
Problem with CGA-based drafts: Quote from RFC 3972 Section 7.4 A strong cautionary note has to be made about using CGA for purpose other than SEND “Each protocol MUST define its own type tag values as explained”: to defend against “related protocol” attacks “The minimum RSA key length of 384 bits may be too short for many applications and the impact of key compromise on the particular protocol must be evaluated”: more considerations are necessary “If the goal is not to verify claims about IPv6 addresses, CGA signatures are probably not the right solution”: not a sufficient security mechanism |