Scribd Logo
Upload

Welcome to Scribd!

  • 18 views

    54-IP-Sec (Authentication Header) - 23-04-2024

    Uploaded by

    Shweta S
    IPsec is a suite of protocols for securing data transmitted over public networks through authentication and encryption. It includes the AH and ESP protocols which provide authentication, integrity, and confidentiality in either tunnel or transport mode. Tunnel mode encrypts the entire packet for end-to-end security between networks, while transport mode encrypts just the payload for host-to-host communication.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    54-IP-Sec (Authentication Header) - 23-04-2024

    Uploaded by

    Shweta S
    18 views17 pages
    IPsec is a suite of protocols for securing data transmitted over public networks through authentication and encryption. It includes the AH and ESP protocols which provide authentication, integrity, and confidentiality in either tunnel or transport mode. Tunnel mode encrypts the entire packet for end-to-end security between networks, while transport mode encrypts just the payload for host-to-host communication.

    Original Description:

    IPSec Authentication Header

    Original Title

    54-IP-Sec (Authentication Header)-23-04-2024

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    IPsec is a suite of protocols for securing data transmitted over public networks through authentication and encryption. It includes the AH and ESP protocols which provide authentication, integrity, and confidentiality in either tunnel or transport mode. Tunnel mode encrypts the entire packet for end-to-end security between networks, while transport mode encrypts just the payload for host-to-host communication.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    18 views17 pages

    54-IP-Sec (Authentication Header) - 23-04-2024

    Uploaded by

    Shweta S
    IPsec is a suite of protocols for securing data transmitted over public networks through authentication and encryption. It includes the AH and ESP protocols which provide authentication, integrity, and confidentiality in either tunnel or transport mode. Tunnel mode encrypts the entire packet for end-to-end security between networks, while transport mode encrypts just the payload for host-to-host communication.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 17

    IP-Security

    Authentication Header
    Introduction
    • IPsec (Internet Protocol Security) is a suite of protocols and
    algorithms for securing data transmitted over the internet or any
    public network.
    • The Internet Engineering Task Force, or IETF, developed the IPsec
    protocols in the mid-1990s to provide security at the IP layer
    through authentication and encryption of IP network packets.
    • To authenticate data packets and guarantee their integrity, IPsec
    includes two protocols.
    • AH (Authentication Header) protocol
    • ESP (Encapsulating Security Payload) protocol.
    • Both protocols, in turn, support two encapsulation modes
    • Tunnel mode
    • Transport mode
    • These modes serve different purposes and provide varying levels of
    security.
    Tunnel Mode:

    • In Tunnel Mode, the entire original IP packet is encapsulated in


    a new IP packet. The new packet is then encrypted and sent
    over the network.
    • This mode is used when two entire networks need to be
    connected over a public network, such as the Internet.
    • In Tunnel Mode, the entire IP packet, including the original source
    and destination addresses, is encrypted, providing end-to-end
    security.
    Transport Mode:
    • In Transport Mode, only the payload of the IP packet is
    encrypted, not the entire packet.
    • This mode is used when a single host needs to communicate
    with another single host over a public network.
    • In Transport Mode, only the data being transmitted is
    encrypted, not the header information such as the source
    and destination addresses.
    IPSec Protocol
    • IPSec uses two distinct protocols: Authentication Header (AH)
    and Encapsulating Security Payload (ESP).
    • The AH protocol provides a mechanism for integrity and
    authentication only.
    • ESP can be used with confidentiality only, authentication only,
    or both confidentiality and authentication.
    • AH provides data integrity by using an authentication algorithm. It
    does not encrypt the packet.
    • ESP typically protects the packet with an encryption algorithm
    and provides data integrity with an authentication algorithm.
    Architecure
    of IPSec
    • DOI – Domain of
    Interpretation
    • It will have the
    identifiers or the id’s
    of all the approved
    authentication and
    encryption
    algorithms
    Authentication Header
    • At the destination side it will generate the message digest and
    compares the MD. If it matches, then the data will be accepted
    otherwise the data will be rejected.
    The new ip address is used to route
    the packet
    Tunnel Mode

    You might also like