RFC 6528: Defending against Sequence Number Attacks

This document specifies an algorithm for the generation of TCP Initial Sequence Numbers (ISNs), such that the chances of an off-path attacker guessing the…

Read RFC 6528 on the RFC Editor

Outgoing relationships (17 related RFCs)

Updates — RFC 793: Transmission Control Protocol
Obsoletes, Informative reference — RFC 1948: Defending Against Sequence Number Attacks
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 1321: The MD5 Message-Digest Algorithm
Normative reference — RFC 1323: TCP Extensions for High Performance
Normative reference — RFC 6056: Recommendations for Transport-Protocol Port Randomization
Informative reference — RFC 1034: Domain names - concepts and facilities
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 5925: The TCP Authentication Option
Informative reference — RFC 3022: Traditional IP Network Address Translator (Traditional NAT)
Informative reference — RFC 4120: The Kerberos Network Authentication Service (V5)
Informative reference — RFC 854: Telnet Protocol Specification
Informative reference — RFC 4251: The Secure Shell (SSH) Protocol Architecture
Informative reference — RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
Informative reference — RFC 4954: SMTP Service Extension for Authentication
Informative reference — RFC 5936: DNS Zone Transfer Protocol (AXFR)

Incoming relationships (9 related RFCs)

Obsoleted by, Informatively referenced by — RFC 9293: Transmission Control Protocol (TCP)
Normatively referenced by — RFC 7414: A Roadmap for Transmission Control Protocol (TCP) Specification Documents
Normatively referenced by — RFC 7430: Analysis of Residual Threats and Possible Fixes for Multipath TCP (MPTCP)
Normatively referenced by — RFC 9414: Unfortunate History of Transient Numeric Identifiers
Normatively referenced by — RFC 9415: On the Generation of Transient Numeric Identifiers
Informatively referenced by — RFC 7011: Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information
Informatively referenced by — RFC 8684: TCP Extensions for Multipath Operation with Multiple Addresses
Informatively referenced by — RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
Informatively referenced by — RFC 9416: Security Considerations for Transient Numeric Identifiers Employed in Network Protocols