a foolish question about RFC - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Security - 系统安全

a foolish question about RFC

a foolish question about RFC# Security - 系统安全

y*i2001-07-05 07:07

1 楼

when i read through RFC2401, i met this:
IPsec uses two protocols to provide traffic security--Authentication
Header(AH) and.....
The IP Authentication Header(AH) provides connectionless integrity,
data origin authenticaiton, and an optional anti-replay services. .....
how can i translate "connectionless integrity" and "anti-replay" into
Chinese? and what is anti-replay( the meaning and specific process)?
thx.
//bow

m*e2001-07-05 07:07

2 楼

replay is the process to defeat the protocol by reusing old packets in new
connections. typically sequence numbers or time stamps are used to prevent
this attack.

【在 y*********i 的大作中提到】

: when i read through RFC2401, i met this:
: IPsec uses two protocols to provide traffic security--Authentication
: Header(AH) and.....
: The IP Authentication Header(AH) provides connectionless integrity,
: data origin authenticaiton, and an optional anti-replay services. .....
: how can i translate "connectionless integrity" and "anti-replay" into
: Chinese? and what is anti-replay( the meaning and specific process)?
: thx.
: //bow

y*i2001-07-05 07:07

3 楼

thx. i see. :)
but what can we say it in Chinese? and connectionless integrity?

【在 m*****e 的大作中提到】

:
: replay is the process to defeat the protocol by reusing old packets in new
: connections. typically sequence numbers or time stamps are used to prevent
: this attack.

a*a2001-07-05 07:07

4 楼

Connectionless integrity means the integrity is based on the indiviual packets,
not on the network stream. Usually, HMAC is used.
Anti-reply is against replay attack. Replay attacks means the adversary re-send
the data in previous session to new one. To defeat such attack, timestamp, or
nounce, is used to uniquely identify a session.

【在 y*********i 的大作中提到】

y*i2001-07-05 07:07

5 楼

well,thx

【在 a***a 的大作中提到】

:
: Connectionless integrity means the integrity is based on the indiviual packets,
: not on the network stream. Usually, HMAC is used.
: Anti-reply is against replay attack. Replay attacks means the adversary re-send
: the data in previous session to new one. To defeat such attack, timestamp, or
: nounce, is used to uniquely identify a session.