Preconfigured keys for Mobile IPv6 draft-ietf-mip6-precfgKbm-01.txt

1
Preconfigured keys for Mobile IPv6draft-ietf-mip6
-precfgKbm-01.txt

• Charles E. Perkins

2
Basic idea

• Mobile node and a correspondent node can
  pre-configure shared data for authenticating
  mobility messages specifically binding update.
• Practically all implementations allow this
  anyway, for testing and diagnostics
• Can be even more secure than return routability
• To the extent that stronger algorithms can be
  specified for processing the shared key
• To the extent that key generation material is NOT
  made public

3
Changes in draft -01.txt

• Observation specification for care-of address
  validation would be a natural evolution for this
  draft
• But, at IETF-60, it was decided not to include
  this functionality
• Nevertheless, having some compatible processing
  paths seems to be wisest
• Thus, the new draft uses the same computation as
  specified within base Mobile IPv6 for return
  routability keys, but with preconfigured key
  material Kcn.
• Since correspondent node and mobile both use the
  same formula and the same preconfigured data, the
  same key is computed.
• In the future, the nonce for the care-of address
  can be acquired by way of return routability,
  while the home nonce remains the same.
• Result compatibility with return routability,
  future extensions to return routability, at very
  little penalty.