Project : planete

Section: Software

IPv6 Opportunistic Encryption

We implemented an Opportunistic Encryption scheme for IPv6 relies on IPv6 Anycast, Authorization certificates and Crypto-Based Identifiers (CBID) to provide secure and easily deployable Opportunistic Encryption in IPv6. Unlike existing schemes (e.g. FreeS/WAN), our proposal does not rely on any global Third Trusted Party (such as DNSSEC or a PKI). Hence, we claim it is more secure, easier to deploy and more robust. We implemented our Opportunistic Encryption approach on FreeBSD 4.7. The source code will be available soon at http://www.inrialpes.fr/planete/people/chneuman/OE.html.