RFC 7474: Security Extension for OSPFv2 When Using Manual Key Management

The current OSPFv2 cryptographic authentication mechanism as defined in RFCs 2328 and 5709 is vulnerable to both inter-session and intra- session replay…

Read RFC 7474 on the RFC Editor

Outgoing relationships (15 related RFCs)

Updates, Normative reference — RFC 2328: OSPF Version 2
Updates, Normative reference — RFC 5709: OSPFv2 HMAC-SHA Cryptographic Authentication
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Informative reference — RFC 3414: User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)
Informative reference — RFC 5310: IS-IS Generic Cryptographic Authentication
Informative reference — RFC 6039: Issues with Existing Cryptographic Protection Methods for Routing Protocols
Informative reference — RFC 4822: RIPv2 Cryptographic Authentication
Informative reference — RFC 6863: Analysis of OSPF Security According to the Keying and Authentication for Routing Protocols (KARP) Design Guide
Informative reference — RFC 6506: Supporting Authentication Trailer for OSPFv3
Informative reference — RFC 6862: Keying and Authentication for Routing Protocols (KARP) Overview, Threats, and Requirements
Informative reference — RFC 6549: OSPFv2 Multi-Instance Extensions
Informative reference — RFC 7210: Database of Long-Lived Symmetric Cryptographic Keys
Informative reference — RFC 4222: Prioritized Treatment of Specific OSPF Version 2 Packets and Congestion Avoidance
Informative reference — RFC 6094: Summary of Cryptographic Authentication Algorithm Implementation Requirements for Routing Protocols

Incoming relationships (15 related RFCs)

Normatively referenced by — RFC 9182: A YANG Network Data Model for Layer 3 VPNs
Normatively referenced by — RFC 9834: YANG Data Models for Bearers and Attachment Circuits as a Service (ACaaS)
Normatively referenced by — RFC 9835: A Network YANG Data Model for Attachment Circuits
Normatively referenced by — RFC 8444: OSPFv2 Extensions for Bit Index Explicit Replication (BIER)
Normatively referenced by — RFC 9667: Dynamic Flooding on Dense Graphs
Normatively referenced by — RFC 8099: OSPF Topology-Transparent Zone
Normatively referenced by — RFC 9502: IGP Flexible Algorithm in IP Networks
Informatively referenced by — RFC 8665: OSPF Extensions for Segment Routing
Informatively referenced by — RFC 9356: Advertising Layer 2 Bundle Member Link Attributes in OSPF
Informatively referenced by — RFC 9492: OSPF Application-Specific Link Attributes
Informatively referenced by — RFC 8510: OSPF Link-Local Signaling (LLS) Extensions for Local Interface ID Advertisement
Informatively referenced by — RFC 8920: OSPF Application-Specific Link Attributes
Informatively referenced by — RFC 9104: Distribution of Traffic Engineering Extended Administrative Groups Using the Border Gateway Protocol - Link State (BGP-LS)
Informatively referenced by — RFC 7602: IS-IS Extended Sequence Number TLV
Informatively referenced by — RFC 9339: OSPF Reverse Metric