Browse Prior Art Database

Draft revised IP security option (RFC1038)

IP.com Disclosure Number: IPCOM000001843D
Original Publication Date: 1988-Jan-01
Included in the Prior Art Database: 2019-Feb-15
Document File: 7 page(s) / 9K

Publishing Venue

Internet Society Requests For Comment (RFCs)

Related People

M. St. Johns: AUTHOR

Related Documents

10.17487/RFC1038: DOI

Abstract

This memo is a pre-publication draft of the revised Internet Protocol Security Option. This RFC reflects the version as approved by the Protocol Standards Steering group, and is provided for informational purposes only. The final version of this document will be available from Navy publications and should not differ from this document in any major fashion. This document will be published as a change to the MIL- STD 1777, "Internet Protocol".

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 27% of the total text.

Network Working Group M. St. Johns Request for Comments: 1038 IETF January 1988

Draft Revised IP Security Option

Status of this Memo

This RFC is a pre-publication draft of the revised Internet Protocol Security Option. This draft reflects the version as approved by the Protocol Standards Steering Group. It is provided for informational purposes only. The final version of this document will be available from Navy Publications and should not differ from this document in any major fashion.

This document will be published as a change to the MIL-STD 1777, "Internet Protocol". Distribution of this memo is unlimited.

9.3.13.1 Internet Options Defined.

The following internet options are defined:

CLASS NUMBER LENGTH DESCRIPTION _____ ______ ______ ___________

0 00000 - End of Option list: This option occupies only 1 octet; it has no length octet. 0 00001 - No Operation: This option occupies only 1 octet; it has no length octet. 0 00010 var. Basic Security: Used to carry security level and accrediting authority flags. 0 00011 var. Loose Source Routing: Used to route the datagram based on information supplied by the source. 0 00101 var. Extended Security: Used to carry additional security information as required by registered authorities. 0 01001 var. Strict Source Routing: Used to route the datagram based on information supplied by the source. 0 00111 var. Record Route: Used to trace the route a datagram takes. 0 01000 4 Stream ID: Used to carry the stream identifier. 2 00100 var. Internet Timestamp: Used to accumulate timing information in transit.

St. Johns [Page 1]

RFC 1038 Draft Revised IP Security Option January 1988

9.3.15.3 DoD Basic Security.

Option type: 130 Option length: variable; minimum length: 4

The option identifies the U.S. security level to which the datagram is to be protected, and the accrediting authorities whose protection rules apply to each datagram.

The option is used by accredited trusted components of an internet to:

a. Validate the datagram as appropriate for transmission from the source.

b. Guarantee that the route taken by the datagram (including the destination) is protected to the level required by all indicated accrediting authorities.

c. Supply common label information required by computer security models.

This option must be copied on fragmentation. This option appears at most once in a datagram.

The format of this option is as follows:

+--------------+-----------+-------------+-------------//----------+ | 10000010 | XXXXXXXX | SSSSSSSS | AAAAAAA[1] AAAAAAA0 | | | | | [0] | +--------------+-----------+-------------+-------------//----------+ TYPE = 130 LENGTH CLASSIFICATION PROTECTION VARIABLE PROTECTION AUTHORITY LEVEL FLAGS

FIGURE 10-A. SECURITY OPTION FORMAT

9.3.15.3.1 Length.

The length of the option is variable. The minimum length option is 4.

9.3.15.3.2 Classification Protection Level.

This field specifies the U.S. classification level to which the datagram should be protected. The information in the datagram sho...

Processing...
Loading...