The PPP Triple-DES Encryption Protocol (3DESE)
RFC 2420
|
Document |
Type |
|
RFC - Proposed Standard
(September 1998; No errata)
|
|
Author |
|
Holger Kummert
|
|
Last updated |
|
2013-03-02
|
|
Stream |
|
Internet Engineering Task Force (IETF)
|
|
Formats |
|
plain text
html
pdf
htmlized (tools)
htmlized
bibtex
|
Stream |
WG state
|
|
(None)
|
|
Document shepherd |
|
No shepherd assigned
|
IESG |
IESG state |
|
RFC 2420 (Proposed Standard)
|
|
Consensus Boilerplate |
|
Unknown
|
|
Telechat date |
|
|
|
Responsible AD |
|
(None)
|
|
Send notices to |
|
(None)
|
Network Working Group H. Kummert
Request for Comments: 2420 Nentec GmbH
Category: Standards Track September 1998
The PPP Triple-DES Encryption Protocol (3DESE)
Status of this Memo
This document specifies an Internet standards track protocol for the
Internet community, and requests discussion and suggestions for
improvements. Please refer to the current edition of the "Internet
Official Protocol Standards" (STD 1) for the standardization state
and status of this protocol. Distribution of this memo is unlimited.
Copyright Notice
Copyright (C) The Internet Society (1998). All Rights Reserved.
Abstract
The Point-to-Point Protocol (PPP) [1] provides a standard method for
transporting multi-protocol datagrams over point-to-point links.
The PPP Encryption Control Protocol (ECP) [2] provides a method to
negotiate and utilize encryption protocols over PPP encapsulated
links.
This document provides specific details for the use of the Triple-DES
standard (3DES) [6] for encrypting PPP encapsulated packets.
Table of Contents
1. Introduction .............................................. 2
1.1 Algorithm ................................................. 2
1.2 Keys ...................................................... 3
2. 3DESE Configuration Option for ECP ........................ 3
3. Packet format for 3DESE ................................... 4
4. Encryption ................................................ 5
4.1 Padding ................................................... 5
4.2 Recovery after packet loss ................................ 6
5. Security Considerations ................................... 6
6. References ................................................ 7
7. Acknowledgements .......................................... 7
8. Author's Address .......................................... 7
9. Full Copyright Statement .................................. 8
Kummert Standards Track [Page 1]
RFC 2420 PPP Triple-DES Encryption September 1998
1. Introduction
The purpose of encrypting packets exchanged between two PPP
implementations is to attempt to insure the privacy of communication
conducted via the two implementations. There exists a large variety
of encryption algorithms, where one is the DES algorithm. The DES
encryption algorithm is a well studied, understood and widely
implemented encryption algorithm. Triple-DES means that this
algorithm is applied three times on the data to be encrypted before
it is sent over the line. The variant used is the DES-EDE3-CBC, which
is described in more detail in the text. It was also chosen to be
applied in the security section of IP [5].
This document shows how to send via the Triple-DES algorithm
encrypted packets over a point-to-point-link. It lies in the context
of the generic PPP Encryption Control Protocol [2].
Because of the use of the CBC-mode a sequence number is provided to
ensure the right order of transmitted packets. So lost packets can be
detected.
The padding section reflects the result of the discussion on this
topic on the ppp mailing list.
In this document, the key words "MUST", "SHOULD", and "recommended"
are to be interpreted as described in [3].
1.1 Algorithm
The DES-EDE3-CBC algorithm is a simple variant of the DES-CBC
algorithm. In DES-EDE3-CBC, an Initialization Vector (IV) is XOR'd
with the first 64-bit (8 octet) plaintext block (P1). The keyed DES
function is iterated three times, an encryption (E) followed by a
decryption (D) followed by an encryption (E), and generates the
ciphertext (C1) for the block. Each iteration uses an independent
key: k1, k2 and k3.
For successive blocks, the previous ciphertext block is XOR'd with
the current 8-octet plaintext block (Pi). The keyed DES-EDE3
encryption function generates the ciphertext (Ci) for that block.
Kummert Standards Track [Page 2]
RFC 2420 PPP Triple-DES Encryption September 1998
P1 P2 Pi
| | |
IV--->(X) +------>(X) +-------->(X)
v | v | v
+-----+ | +-----+ | +-----+
k1->| E | | k1->| E | : k1->| E |
+-----+ | +-----+ : +-----+
| | | : |
v | v : v
+-----+ ^ +-----+ ^ +-----+
k2->| D | | k2->| D | | k2->| D |
+-----+ | +-----+ | +-----+
Show full document text