Interview with Kenny Paterson, Professor of Information Security at Royal Holloway, University of London
June 14, 2006
by Mirko Zorz
...
Your research lead you to the discovery of a high-profile vulnerability. Give us some details.
In late 2004, Arnold Yau (a PhD student in the group) and I began an investigation into IPsec security, in particular the security of the "encryption only" configuration of IPsec. The relevant standards are pretty clear that this configuration should be avoided, but they also mandate it be supported, mostly for reasons of backwards compatibility.
Source: http://www.net-security.org/
...
Your research lead you to the discovery of a high-profile vulnerability. Give us some details.
In late 2004, Arnold Yau (a PhD student in the group) and I began an investigation into IPsec security, in particular the security of the "encryption only" configuration of IPsec. The relevant standards are pretty clear that this configuration should be avoided, but they also mandate it be supported, mostly for reasons of backwards compatibility.
Source: http://www.net-security.org/