Secure address resolution protocol

摘要

This disclosure describes, in part, systems, devices, and techniques to encrypt address resolution protocol (ARP) messages to prevent a rogue device from accessing information about a local network. In certain embodiments described herein, networked devices are preconfigured with security credentials that allow the devices, possibly via network interface controllers (NICs), to encrypt outgoing ARP messages and decrypt incoming ARP messages. The NICs may listen for encrypted messages that are recognized as being ARP messages. These encrypted messages may include a designator that indicates that the message is an encrypted ARP message. When a NIC receives a message that is indicated as an encrypted ARP message, then the NIC will decrypt the message using secure credentials to obtain the true ARP message. The device will then process the message in accordance standard procedures.

主权项

1. A networked device, comprising:
a host computing device; and a network interface controller (NIC) to connect the host computing device to a local network, the NIC including firmware that specifies network credentials, the NIC including an integrated circuit that causes the NIC to perform actions comprising:
receiving a message from at least one other device on the local network;determining that the message includes a designator associated with an encrypted address resolution protocol (ARP) message;determining that the message is not able to be decrypted to obtain a valid ARP message; andforwarding the message to the host computing device.