Attacking Predictable IPsec ESP Initialization Vectors

Authors:
Sami Vaarala;Antti Nuopponen;Teemupekka Virtanen
Affiliations:
-;-;-
Venue:
ICICS '02 Proceedings of the 4th International Conference on Information and Communications Security
Year:
2002

Citing 1
Cited 1

Problem areas for the IP security protocols

SSYM'96 Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography - Volume 6

Testing Topologies for the Evaluation of IPSEC Implementations

ICCSA '09 Proceedings of the International Conference on Computational Science and Its Applications: Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

Predictable initialization vectors in IPsec ESP encryption, allowed by the IPsec specifications and used by most implementations, compromise IPsec confidentiality. By using an adaptive chosen plaintext attack, an attacker can break low entropy plaintext blocks using brute force, and confirm guesses of the contents of arbitrary plaintext blocks. We analyze the preconditions and the seriousness of such attacks, and provide results of practical attack experiments.