SECURE NEIGHBOR DISCOVERY (SEND) USING PRE-SHARED KEY

摘要

An extension is provided to the SEND protocol without requiring a CGA or third party trust anchor. A shared key is provided to both a sender and receiver of a neighbor discovery (ND) message. A digital signature option is contained in the ND message. A digital signature field is determined by the algorithm field in the option. When the ND message is received, the receiver may verify the digital signature field using the pre-shared key according to the algorithm field. If the ND message passes verification, the receiver may process the message.

主权项

1. A method for verifying a neighbor discovery message, comprising:
receiving a neighbor discovery message from a first computer by a second computer, the neighbor discovery message including an algorithm identifier, an algorithm, and an encryption type identifier; accessing the algorithm identifier and algorithm from the neighbor discovery message; performing a verification of the received neighbor discovery message by the second computer based on the algorithm identifier, algorithm, and a key.