携带数字签名的OSPF路由协议安全研究.pdfVIP

25 2 V o.l 25 N o. 2 2005 4 Journa l o f N an j ing U n iversity o f Posts and T e lecomm un ication s A pr. 2005 ( 2005) OSPF , , , ( , 2 10003 ) OSPF ( ) , OSPF LSA ( ) , O SPF , L SA O SPF , L SA ; ; ; RSA TN 9 15. 04; T P39 3. 0 8 B Research on Security ofOSPF RoutingProtocolwithDigital Signature LIPeng,WANG Shaod,iWANG Ruchuan, Z ANG Dengyin ( D epartm en t of C ompu ter Science and T echnology, N an jing U n ivers ity of P o sts and T elecomm un icat ion s, N an j ing 2 10003, Ch ina) Abstract: In order to strengthen the security p erfo rm ance o f op en shortest p ath first( O SPF ) protoco,l dig ita l signature is added to the link state advertisem ent ( LSA ) data, wh ich protects the in form at ion exch ange of the O SPF rou ting pro toco.l T his pap er expounds on the theory and cru cial technology in designing OSPF w ith dig ita l signa ture. In add it ion, the sending and receiv ing o f the public key and LSA w ith digita l signature h ave been tested to ver ify the rationales and feasib ility o f the design. T he results show tha t the u se of d ig ital signature in O SPF can pre vent m alic ious attacks from illegal routers in the netw ork and prov ide LSA data w ith endtoend in tegrated authenti ca tion. Key words:Open shortest p ath first; D ig ita l signature; N ewt ork security; R SA algorithm 1 L SA ( ) O SPF( ) , O SPF H ello [ 1] ( M D5 MD 5 ) LSA ,