USAGI IPv6 IPsec Development for Linux

Short Description
Linux kernel 2.4 and 2.6 series. we present our (IPv6) IPsec … patibility with FreeS/WAN’s IPsec programming interface. between kernel and userland. …

Website: hiroshi1.hongo.wide.ad.jp | Filesize: 26kb

Content
USAGI IPv6 IPsec Development for Linux
Mitsuru Kanda
Toshiba Corporation
Communication Platform Laboratory
Corporate Research & Development Center
mk@isl.rdc.toshiba.co.jp
Kazunori Miyazawa
Yokogawa Electric Corporation
Corporate Research and Development Headquarters
Advanced Solitions Research Center
Kazunori.Miyzawa@yokogawa.com
Hiroshi Esaki
The University of Tokyo
Graduate School of Information Science and Technology
hiroshi@wide.ad.jp
Abstract
USAGI project[4] was founded to improve and develop
Linux IPv6 stack. We also developed (IPv6) IPsec stack for
Linux kernel 2.4 and 2.6 series. we present our (IPv6) IPsec
implementation (PE KEY, IPsec Security Association, Security
Policy, output processing, and input processing) for
both 2.4 and 2.6.
1 Introduction
IPsec is an archtectural system to provide security services
in IP layer. On IPv4 IPsec, it is difficult to introduce
because we have to retorofit the existing TCP/IP(v4) stack.
But on IPv6 IPsec, it is embedded as a standard feature in
the IPv6 specification, which means it’s easy to deploy with
IPv6. Linux kernel has been included the IPv6 basic feature
set since version 2.2. Unfortunately IPv6 IPsec was lacking
in it. But the IPv4 IPsec stack is provided by FreeS/WAN
project[2] as…