up

2020-03-04

Why might we need a secure way to communicate?

• confidentiality
• integrity
• authentication - knowing who you’re talking to

Adversary Model: Dolev-Yao

• Able to read all traffic
• write anything
• pretending to be anybody
• stop messages
• cannot break encryption

SPD - Security Policy Database

SPI - security parameter index

isakmp is the ipsec protocol used for key exchange, not in the syllabus

TLS sessions start with public-key crypto.

Certificate

ipsec has two modes:

• transport
• tunnel
  • There are two IP headers.

and two protocols:

• AH
  • Authentication header
• ESP
  • Encapsulated Security Payload