PnP-IPsec builds on Self-validated Public Data Distribution (SvPDD), a protocol that we present to establish secure connections between remote peers/networks, without depending on pre-distributed keys or certification infrastructure. Instead, SvPDD uses available anonymous communication infrastructures such as Tor, which we show to allow detection of MitM attacker interfering with communication. SvPDD may also be used in other scenarios lacking secure public key distribution, such as the initial connection to an SSH server.
We provide an open-source implementation of PnP-IPsec and SvPDD, and show that the resulting system is practical and secure.
Category / Keywords: applications / key management Publication Info: This is a full version of a paper accepted to appear in ESORICS 2013 (but not yet published). Date: received 21 Jun 2013 Contact author: yossig2 at gmail com Available format(s): PDF | BibTeX Citation Version: 20130625:155249 (All versions of this report) Short URL: ia.cr/2013/410 Discussion forum: Show discussion | Start new discussion