Analysis of the HIP Base Exchange Protocol

Abstract The Host Identity Protocol (HIP) is an Internet security and multiaddressing mechanism specified by the IETF. HIP introduces a new layer between the transport and network layers of the TCP/IP stack that maps host identifiers to network locations, thus separating the two conflicting roles that IP addresses have in the current Internet. This paper analyzes the security and functionality of the HIP base exchange, which is a classic key exchange protocol with some novel features for authentication and DoS protection. The base exchange is the most stable part of the HIP specification with multiple existing implementations. We point out several security issues in the current protocol and propose changes that are compatible with the goals of HIP.

• Type: Conference
• Year: 2005
• Where: ACISP
• Authors: Tuomas Aura, Aarthi Nagarajan, Andrei Gurtov
• Keywords: ACISP 2005, Base Exchange, HIP Base Exchange, Host Identity Protocol, Security Privacy