RFC - 3972

Cryptographically Generated Addresses (CGA)

Original:	ftp://ftp.isi.edu/in-notes/rfc3972.txt
Authors:	T. Aura [Microsoft Research]
Date:	March 2005
Category:	Proposed Standard

---

Updated by:
RFC-4581prop	Cryptographically Generated Addresses (CGA) Extension Field Format

Referred by:	8 RFC
Refers to:	11 RFC

---

Status

This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.

Copyright Notice

Copyright (C) The Internet Society (2004).

Abstract

This document describes a method for binding a public signature key to an IPv6 address in the Secure Neighbor Discovery (SEND) protocol. Cryptographically Generated Addresses (CGA) are IPv6 addresses for which the interface identifier is generated by computing a cryptographic one-way hash function from a public key and auxiliary parameters. The binding between the public key and the address can be verified by re-computing the hash value and by comparing the hash with the interface identifier. Messages sent from an IPv6 address can be protected by attaching the public key and auxiliary parameters and by signing the message with the corresponding private key. The protection works without a certification authority or any security infrastructure.

---