Chapter 5. The Encapsulating Security Payload (ESP)

The Encapsulating Security Payload (ESP) is a protocol header inserted into an IP datagram to provide confidentiality, data origin authentication, antireplay, and data integrity services to IP. ESP may be applied in different modes in which it is inserted between the IP header and the upper-layer protocol header (e.g., a TCP or UDP header) or it may be used to encapsulate an entire IP datagram.

ESP provides confidentiality with an encryptor and data integrity with an authenticator. The specific algorithm used by both the encryptor and authenticator is determined by the corresponding components of an ESP security association. By divorcing the base ESP definition from the actual algorithms that provide its services, ESP is a generic and extensible security mechanism. Antireplay services are optionally provided by ESP. The decision whether antireplay is provided or not is up to the recipient of the packet. A unique and monotonically increasing sequence number is always inserted by the sender of an ESP-protected datagram but the recipient is not required to check it. Since this protection is for the benefit of the receiver, it is usually employed.

Top

Table of content

IPSec(c) The New Security Standard for the Internet, Intranets, and Virtual Private Networks

IPSec (2nd Edition)

ISBN: 013046189X
EAN: 2147483647

Year: 2004
Pages: 76

Authors: Naganand Doraswamy, Dan Harkins

BUY ON AMAZON

C++ GUI Programming with Qt 3

C++ How to Program (5th Edition)

Special Edition Using Crystal Reports 10

InDesign Type: Professional Typography with Adobe InDesign CS2

Lean Six Sigma for Service : How to Use Lean Speed and Six Sigma Quality to Improve Services and Transactions

Programming .Net Windows Applications