Table Of ContentInformation Security and Cryptography
Adrian Perrig
Pawel Szalachowski
Raphael M. Reischuk
Laurent Chuat
SCION:
A Secure
Internet
Architecture
Information Security and Cryptography
Series Editors
David Basin, ETH Zürich, Switzerland
Kenny Paterson, Royal Holloway, University of London, UK
Advisory Board
Michael Backes
Gilles Barthe
Ronald Cramer
Ivan Damgård
Andrew D. Gordon
Joshua D. Guttman
Christopher Kruegel
Ueli Maurer
Tatsuaki Okamoto
Adrian Perrig
Bart Preneel
More information about this series at http://www.springer.com/series/4752
Adrian Perrig · Pawel Szalachowski
Raphael M. Reischuk · Laurent Chuat
SCION: A Secure Internet
Architecture
1 3
Adrian Perrig Raphael M. Reischuk
Network Security Group Network Security Group
ETH Zürich ETH Zürich
Zürich Zürich
Switzerland Switzerland
Pawel Szalachowski Laurent Chuat
Network Security Group Network Security Group
ETH Zürich ETH Zürich
Zürich Zürich
Switzerland Switzerland
ISSN 1619-7100 ISSN 2197-845X (electronic)
Information Security and Cryptography
ISBN 978-3-319-67079-9 ISBN 978-3-319-67080-5 (eBook)
https://doi.org/10.1007/978-3-319-67080-5
Library of Congress Control Number: 2017955641
© Springer International Publishing AG 2017
This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part
of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations,
recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or
information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar
methodology now known or hereafter developed.
The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication
does not imply, even in the absence of a specific statement, that such names are exempt from the relevant
protective laws and regulations and therefore free for general use.
The publisher, the authors and the editors are safe to assume that the advice and information in this book
are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or
the editors give a warranty, express or implied, with respect to the material contained herein or for any
errors or omissions that may have been made. The publisher remains neutral with regard to jurisdictional
claims in published maps and institutional affiliations.
Printed on acid-free paper
This Springer imprint is published by Springer Nature
The registered company is Springer International Publishing AG
The registered company address is: Gewerbestrasse 11, 6330 Cham, Switzerland
ToMiyoung,
Thankyouforyourunwaveringsupport.
Love,forever!
Adrian
ToHenio,
Forallthesesleeplessnights.
Paweł
Tomyfamilyandthose
whosupportedmealongmyway.
Raphael
ToManon,
Foryourpatienceandencouragement.
Laurent
Contents
Foreword xi
Preface xv
I Overview 1
1 Introduction 3
1.1 Today’sInternet . . . . . . . . . . . . . . . . . . . . . . . . 3
1.2 GoalsofaSecureInternetArchitecture . . . . . . . . . . . . 8
1.3 FutureInternetArchitectures . . . . . . . . . . . . . . . . . 13
2 The SCION Architecture 17
2.1 ControlPlane . . . . . . . . . . . . . . . . . . . . . . . . . 21
2.2 DataPlane . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.3 SecurityAspects . . . . . . . . . . . . . . . . . . . . . . . . 27
2.4 UseCases . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
2.5 IncentivesforStakeholders . . . . . . . . . . . . . . . . . . 34
2.6 Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . 36
2.7 Extensions . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
2.8 MainContributions . . . . . . . . . . . . . . . . . . . . . . 39
3 Isolation Domains (ISDs) 43
3.1 WhyIsolation? . . . . . . . . . . . . . . . . . . . . . . . . . 43
3.2 TheISDCore . . . . . . . . . . . . . . . . . . . . . . . . . 47
3.3 CoordinationAmongISDs . . . . . . . . . . . . . . . . . . 48
3.4 NameResolution . . . . . . . . . . . . . . . . . . . . . . . 48
3.5 ISDGovernanceModels . . . . . . . . . . . . . . . . . . . . 51
3.6 NestedIsolationDomains . . . . . . . . . . . . . . . . . . . 56
II SCION in Detail 59
4 Authentication Infrastructure 61
4.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
4.2 Control-PlaneAuthentication . . . . . . . . . . . . . . . . . 68
4.3 NameAuthentication . . . . . . . . . . . . . . . . . . . . . 83
4.4 End-EntityAuthentication . . . . . . . . . . . . . . . . . . . 86
vii
viii Contents
5 ISD Coordination 93
5.1 MotivationandObjectives . . . . . . . . . . . . . . . . . . . 94
5.2 AnnouncingandDiscoveringNewISDs . . . . . . . . . . . 97
5.3 LocalResolutionofConflicts . . . . . . . . . . . . . . . . . 100
6 Name Resolution 101
6.1 Background . . . . . . . . . . . . . . . . . . . . . . . . . . 102
6.2 NameResolutionArchitecture . . . . . . . . . . . . . . . . 104
6.3 NamingInformationModel . . . . . . . . . . . . . . . . . . 106
6.4 TheRAINSProtocol. . . . . . . . . . . . . . . . . . . . . . 114
6.5 TheNamingConsistencyObserver(NCO) . . . . . . . . . . 116
7 Control Plane 119
7.1 PathExplorationandRegistration . . . . . . . . . . . . . . . 119
7.2 PathLookup . . . . . . . . . . . . . . . . . . . . . . . . . . 132
7.3 SecurePathRevocation . . . . . . . . . . . . . . . . . . . . 138
7.4 FailureResilienceandServiceDiscovery . . . . . . . . . . . 146
7.5 AS-LevelAnycastService . . . . . . . . . . . . . . . . . . . 153
7.6 SCIONControlMessageProtocol(SCMP) . . . . . . . . . . 155
7.7 TimeSynchronization . . . . . . . . . . . . . . . . . . . . . 159
8 Data Plane 161
8.1 PathFormat . . . . . . . . . . . . . . . . . . . . . . . . . . 162
8.2 CreationofForwardingPaths . . . . . . . . . . . . . . . . . 164
8.3 EfficientPathConstruction . . . . . . . . . . . . . . . . . . 174
9 Host Structure 179
9.1 SCIONDispatcher . . . . . . . . . . . . . . . . . . . . . . . 179
9.2 SCIONDaemon . . . . . . . . . . . . . . . . . . . . . . . . 183
9.3 TransmissionControlProtocol(TCP/SCION) . . . . . . . . 185
9.4 SCIONStreamProtocol(SSP) . . . . . . . . . . . . . . . . 188
10 Deployment and Operation 191
10.1 ISPDeployment . . . . . . . . . . . . . . . . . . . . . . . . 191
10.2 End-DomainDeployment . . . . . . . . . . . . . . . . . . . 199
10.3 TheSCION-IPGateway(SIG) . . . . . . . . . . . . . . . . 201
10.4 HowtoTryOutSCION . . . . . . . . . . . . . . . . . . . . 211
10.5 SCIONASManagementFramework . . . . . . . . . . . . . 215
10.6 DeployingaNewAS . . . . . . . . . . . . . . . . . . . . . 218
10.7 TheSCIONLabExperimentationEnvironment . . . . . . . . 220
10.8 Example: LifeofaSCIONDataPacket . . . . . . . . . . . . 223
10.9 SCIONPathPolicy . . . . . . . . . . . . . . . . . . . . . . 230
Contents ix
III Extensions 241
11 SIBRA 243
11.1 MotivationandIntroduction . . . . . . . . . . . . . . . . . . 244
11.2 GoalsandAdversaryModel . . . . . . . . . . . . . . . . . . 245
11.3 DesignOverview . . . . . . . . . . . . . . . . . . . . . . . 247
11.4 SIBRACorePaths . . . . . . . . . . . . . . . . . . . . . . . 250
11.5 SIBRASteadyPaths . . . . . . . . . . . . . . . . . . . . . . 259
11.6 SIBRAEphemeralPaths. . . . . . . . . . . . . . . . . . . . 261
11.7 PriorityTrafficMonitoringandPolicing . . . . . . . . . . . 268
11.8 UseCases . . . . . . . . . . . . . . . . . . . . . . . . . . . 272
11.9 Discussion . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
11.10 FurtherReading . . . . . . . . . . . . . . . . . . . . . . . . 276
12 OPT and DRKey 279
12.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . 280
12.2 OPTProblemDefinition . . . . . . . . . . . . . . . . . . . . 281
12.3 OPTDesignOverview . . . . . . . . . . . . . . . . . . . . . 283
12.4 OPTProtocolDescription . . . . . . . . . . . . . . . . . . . 286
12.5 DynamicallyRecreatableKeys(DRKey) . . . . . . . . . . . 291
IV Analysis and Evaluation 299
13 Security Analysis 301
13.1 SecurityGoals . . . . . . . . . . . . . . . . . . . . . . . . . 302
13.2 ThreatModel . . . . . . . . . . . . . . . . . . . . . . . . . 304
13.3 SoftwareSecurity . . . . . . . . . . . . . . . . . . . . . . . 305
13.4 Control-PlanePathManipulation . . . . . . . . . . . . . . . 307
13.5 Data-PlanePathManipulation . . . . . . . . . . . . . . . . . 312
13.6 CensorshipandSurveillance. . . . . . . . . . . . . . . . . . 318
13.7 AttacksAgainstAvailability . . . . . . . . . . . . . . . . . . 320
13.8 AbsenceofKillSwitches . . . . . . . . . . . . . . . . . . . 325
13.9 ResiliencetoPathHijacking . . . . . . . . . . . . . . . . . . 327
13.10 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330
14 Power Consumption 331
14.1 ModelingPowerConsumptionofanFIARouter . . . . . . . 332
14.2 Simulation . . . . . . . . . . . . . . . . . . . . . . . . . . . 334
V Speci(cid:12)cation 339
15 Packet and Message Formats 341
15.1 SCIONPacket . . . . . . . . . . . . . . . . . . . . . . . . . 341
x Contents
15.2 ControlPlane . . . . . . . . . . . . . . . . . . . . . . . . . 355
15.3 PCBandPathSegment . . . . . . . . . . . . . . . . . . . . 356
15.4 PathManagementMessages . . . . . . . . . . . . . . . . . . 361
15.5 PKIInteractions . . . . . . . . . . . . . . . . . . . . . . . . 362
15.6 SCMPPacket . . . . . . . . . . . . . . . . . . . . . . . . . 363
16 Con(cid:12)guration File Formats 369
16.1 TrustRootConfiguration . . . . . . . . . . . . . . . . . . . 369
16.2 ASCertificates . . . . . . . . . . . . . . . . . . . . . . . . . 370
16.3 DiscoveryServiceConfiguration . . . . . . . . . . . . . . . 374
16.4 Router,Server,andEnd-HostConfiguration . . . . . . . . . 376
17 Cryptographic Algorithms 381
17.1 AlgorithmAgility . . . . . . . . . . . . . . . . . . . . . . . 381
17.2 SymmetricPrimitives . . . . . . . . . . . . . . . . . . . . . 384
17.3 AsymmetricPrimitives . . . . . . . . . . . . . . . . . . . . 385
17.4 Post-QuantumCryptography . . . . . . . . . . . . . . . . . 386
Bibliography 387
Frequently Asked Questions 409
Glossary 417
Abbreviations 421
Index 423
