Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I am looking to an Cryptographically Generated Address (CGA) implementation in Java or in C++. Would be glad if someone can help.

share|improve this question
Can you be clearer about what you're looking for? – nealmcb Apr 27 '11 at 18:11
en.wikipedia.org/wiki/Cryptographically_Generated_Address -- at the moment, there's an RFC that describes this, but I haven't heard of any implementations. – Jeff Ferland♦ Apr 27 '11 at 18:45
I voted to close. SS is not about programming. – anonymous Apr 27 '11 at 20:50
Interesting concept... @Ams, it's not not about programming. I was doubtful, but now it seems to me to be on topic, he's looking for an implementation of a cryptographic protocol. That said, I dont think an answer will be forthcoming, as per @Jeff's comment... – AviD♦ Apr 27 '11 at 23:31
@AviD, unfortunately, for me it seems that SS is becoming completely about everything that contains even some mention of security related item. I would agree it is on-topic if security weakness, or possibilities how to strengthen the solution were discussed. – anonymous Apr 28 '11 at 8:31
show 2 more comments

1 Answer

up vote 3 down vote

http://www.thc.org/thc-ipv6/ a whole suite if ipv6 utilities, but sendpees6 has great examples of how to do CGA against SEND.

share|improve this answer
Interesting. Here is one example of a DoS attack capitalizing on the extra overhead of verifying the signatures: Project 13x: IPv6 DoS with sendpees6 (10 pts.) – nealmcb Apr 28 '11 at 5:34
i was looking more for a tool ,which could generate CGA address. – Bass Apr 28 '11 at 11:42
1  
cga_opt = thc_generate_cga(prefix, key, &cga); is how you generate it if you're using the thc toolkit. Is that close enough? – Marcin Apr 28 '11 at 13:34
1  
@nealmcb, funny, that's exactly what I did for my thesis few years ago when thc's code wasn't nearly as functional ;) The fun part about SeND is that the client gets to pick the strength of the key, so you can kill any SeND aware node by precreating a packet and then just replying it as fast as you can. Depending on the speeds of the CPU's, I've been able to kill a node by playing <25 packets a second. – Marcin May 13 '11 at 22:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.