{"id":"https://openalex.org/W578000702","doi":"https://doi.org/10.3929/ethz-a-010129931","title":"A Constructive Analysis of IPsec","display_name":"A Constructive Analysis of IPsec","publication_year":2014,"publication_date":"2014-01-01","ids":{"openalex":"https://openalex.org/W578000702","doi":"https://doi.org/10.3929/ethz-a-010129931","mag":"578000702"},"language":"en","primary_location":{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/154525","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/154525","pdf_url":"http://hdl.handle.net/20.500.11850/154525","source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/20.500.11850/154525","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012323964","display_name":"Daniel Jost","orcid":"https://orcid.org/0000-0002-6562-9665","observed_orcids":["https://orcid.org/0000-0002-6562-9665"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Jost, Daniel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5012323964"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1222,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.81810616,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.6718999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.6718999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.2863999903202057,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.01209999993443489,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ipsec","display_name":"IPsec","score":0.953000009059906},{"id":"https://openalex.org/keywords/ikev2","display_name":"IKEv2","score":0.8809999823570251},{"id":"https://openalex.org/keywords/protocol-composition","display_name":"protocol composition","score":0.6140000224113464},{"id":"https://openalex.org/keywords/replay-attacks","display_name":"replay attacks","score":0.4690000116825104},{"id":"https://openalex.org/keywords/authenticated-key-exchange","display_name":"authenticated key agreement","score":0.5400000214576721},{"id":"https://openalex.org/keywords/diffie-hellman","display_name":"Diffie-Hellman","score":0.8339999914169312},{"id":"https://openalex.org/keywords/random-oracle-model","display_name":"random oracle model","score":0.527999997138977},{"id":"https://openalex.org/keywords/pre-shared-key","display_name":"pre-shared key","score":0.6299999952316284},{"id":"https://openalex.org/keywords/security-protocol-analysis","display_name":"protocol security analysis","score":0.42800000309944153},{"id":"https://openalex.org/keywords/key-establishment","display_name":"key establishment","score":0.3190000057220459}],"concepts":[{"id":"https://openalex.org/C67396069","wikidata":"https://www.wikidata.org/wiki/Q210214","display_name":"IPsec","level":3,"score":0.7700116634368896},{"id":"https://openalex.org/C2778701210","wikidata":"https://www.wikidata.org/wiki/Q28130034","display_name":"Constructive","level":3,"score":0.6254141926765442},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.44699349999427795},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19397521018981934},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15328210592269897},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0780201256275177},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/154525","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/154525","pdf_url":"http://hdl.handle.net/20.500.11850/154525","source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.917.6475","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.917.6475","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://e-collection.library.ethz.ch/eserv/eth%3A8506/eth-8506-01.pdf","raw_type":"text"},{"id":"doi:10.3929/ethz-a-010129931","doi":"https://doi.org/10.3929/ethz-a-010129931","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-a-010129931","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"mag:578000702","doi":null,"is_oa":false,"landing_page_url":"http://e-collection.library.ethz.ch/eserv/eth:8506/eth-8506-01.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/154525","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/154525","pdf_url":"http://hdl.handle.net/20.500.11850/154525","source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W578000702.pdf","grobid_xml":"https://content.openalex.org/works/W578000702.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7099956841","https://openalex.org/W2591743496","https://openalex.org/W2357044387","https://openalex.org/W7096961985","https://openalex.org/W2486937095","https://openalex.org/W7095802316","https://openalex.org/W2367744413","https://openalex.org/W3037635757","https://openalex.org/W7135823459","https://openalex.org/W2363882625"],"abstract_inverted_index":{"Securing":[0],"today's":[1],"Internet":[2,41],"communication":[3,634],"is":[4,25,62,76,88,93,214,248,503,515,534,587,611],"one":[5,15,570],"of":[6,11,16,30,39,72,107,121,137,166,181,192,211,230,242,309,375,477,521,551,562,582,603,645,656,664,689,697,731,737,769,774,799,821,832,852,872,906,926,953,962,970],"the":[7,17,36,40,51,53,59,65,70,73,82,101,122,138,147,163,173,177,182,188,203,206,222,234,240,243,259,277,296,323,329,344,372,402,436,445,452,480,483,498,509,518,540,552,555,560,563,580,583,604,636,648,654,662,672,690,703,713,716,720,740,752,756,762,770,775,786,794,806,822,833,850,873,881,889,898,903,910,916,924,946,965,968],"most":[8,798,871],"fundamental":[9],"application":[10],"cryptographic":[12,501,608,735],"techniques,":[13],"and":[14,46,113,176,194,200,205,265,289,294,351,378,386,442,463,469,482,495,594,599,628,630,640,669,686,695,709,724,739,772,841,902],"prevailing":[18],"protocol":[19,61,75,124,140,155,279,298,346,807],"suite":[20],"used":[21,613,790,836,957],"for":[22,33,49,251,399,433,444,465,505,575,614,647,858],"this":[23,184,212,246,376,456,617],"purpose":[24],"IPsec.It":[26],"consists,":[27],"among":[28],"others,":[29],"a":[31,47,96,126,228,281,286,290,300,335,409,622,625,734,765,811,856,951],"sub-protocol":[32,48],"key":[34,84,284,753,787,859],"establishment,":[35],"second":[37,97],"version":[38,730,905],"Key":[42,975],"Exchange":[43],"(IKEv2)":[44],"protocol,":[45,718],"securing":[50],"traffic,":[52],"Encapsulated":[54],"Security":[55],"Payload":[56],"(ESP)":[57],"protocol.Whereas":[58],"ESP":[60,204,297,481],"based":[63,80],"on":[64,81,305,439,549,712,719,864,945],"well":[66,249,268,326],"established":[67],"encrypt-then-MAC":[68],"approach,":[69],"design":[71],"IKEv2":[74,123,139,207,264,278,345,717,921],"more":[77,352],"peculiar:":[78],"while":[79],"Diffie-Hellman":[83,757,928],"exchange,":[85],"that":[86,108,215,276,295,595,829,870,948],"exchange":[87],"initially":[89],"not":[90,644,659,678,803,884,912,919],"authenticated.The":[91],"authentication":[92,292],"postponed":[94],"to":[95,198,314,340,343,347,358,362,391,395,404,423,428,455,460,536,566,700,784,854,888,909,955,967],"round,":[98],"which":[99,526,868],"at":[100,546],"same":[102],"time":[103],"already":[104],"makes":[105],"use":[106,855],"previously":[109],"negotiated":[110],"key.Somewhat":[111],"surprisingly,":[112,653],"despite":[114],"its":[115,528],"practical":[116,748],"importance,":[117],"no":[118],"comprehensive":[119],"analysis":[120,736],"in":[125,144,146,322,417,489,600,667,670,760,782,791,793,837,922,958],"coherent":[127],"framework":[128],"has":[129,527,565,779,933],"been":[130,142,693,780,934],"conducted":[131],"so":[132],"far.Even":[133],"though":[134],"certain":[135],"aspects":[136,160,688],"have":[141,692],"studied":[143,935],"depth":[145],"literature,":[148,704],"all":[149],"analyses":[150],"either":[151,809],"consider":[152,621,805,815],"significantly":[153],"simplified":[154,812,877],"variants":[156],"or":[157,814],"neglect":[158,746],"important":[159],"such":[161,255,750],"as":[162,256,267,269,325,327,517,751,844],"initial":[164],"lack":[165],"authentication.This":[167],"might":[168],"partially":[169],"be":[170,225,487,537,567,573,701,956],"explained":[171],"by":[172,263,413,866,936],"numerous":[174],"options":[175],"thereby":[178],"implied":[179],"complexity":[180],"protocol.In":[183],"thesis,":[185],"we":[186,274,337,449,619],"follow":[187],"constructive":[189,310,971],"cryptography":[190,311],"paradigm":[191,308,969],"Maurer":[193,398],"Renner":[195],"(ICS":[196],"2011)":[197],"model":[199],"analyze":[201],"both":[202,315,707],"protocol.One":[208],"main":[209],"advantage":[210],"approach":[213,247,851],"it":[216,349],"comes":[217],"with":[218,367,624,661,960],"strong":[219,845],"composition":[220,235],"guarantees:":[221],"protocols":[223,254,485,691,878],"can":[224,486,572],"decomposed":[226],"into":[227,408],"sequence":[229],"individually":[231],"provable":[232,333,665],"steps;":[233],"theorem":[236],"then":[237],"immediately":[238],"guarantees":[239,261],"security":[241,260,319,513,547,590,666,674,900,925],"overall":[244],"protocol.Thus,":[245],"suited":[250],"analyzing":[252],"complex":[253],"IKEv2.We":[257],"formalize":[258],"achieved":[262],"ESP,":[266],"their":[270,368,466,943],"assumptions,":[271],"explicitly.In":[272],"particular,":[273],"prove":[275],"constructs":[280,299],"shared":[282],"secret":[283],"assuming":[285],"random":[287],"oracle":[288],"pre-established":[291],"mechanism,":[293],"replay-free":[301],"secure":[302],"channel,":[303],"relying":[304],"pre-shared":[306],"keys.The":[307],"enables":[312],"us":[313],"clearly":[316],"identify":[317],"superfluous":[318],"mechanisms":[320],"applied":[321],"protocols,":[324],"pinpoint":[328],"specific":[330],"shortcomings":[331],"hindering":[332],"security.As":[334],"consequence,":[336],"are":[338,592,643,676,862],"able":[339],"propose":[341],"improvements":[342],"make":[348],"simpler":[350],"secure.i":[353],"Acknowledgments":[354],"I":[355,388],"would":[356,389,420],"like":[357,390,422],"express":[359,392],"my":[360,381,393,415,425,429,461,472],"thankfulness":[361],"various":[363,834],"people":[364],"who":[365,379],"contributed":[366],"valuable":[369,406,437],"input":[370],"towards":[371],"successful":[373],"completion":[374],"thesis":[377,416,618],"motivated":[380],"throughout":[382,471],"those":[383],"six":[384],"months.First":[385],"foremost,":[387],"gratitude":[394],"Professor":[396],"Ueli":[397],"giving":[400],"me":[401],"opportunity":[403],"gain":[405],"insight":[407],"fascinating":[410],"research":[411],"area":[412],"writing":[414],"his":[418,434],"group.I":[419],"also":[421,459],"show":[424,894],"greatest":[426],"appreciation":[427],"adviser":[430],"Bj\u00f6rn":[431],"Tackmann":[432],"support,":[435],"feedback":[438],"draft":[440],"versions,":[441],"especially":[443],"countless":[446],"illuminating":[447],"discussions":[448],"had":[450],"about":[451],"topics":[453],"related":[454],"thesis.Special":[457],"thanks":[458],"family":[462],"friends":[464],"enduring":[467],"support":[468],"encouragement":[470],"life.iii":[473],"1.2":[474],"Related":[475,651],"WorkModes":[476],"Operations":[478],"Both":[479],"AH":[484,601],"deployed":[488],"two":[490],"basic":[491],"modes:":[492],"tunnel":[493,499,639],"mode":[494,610,642],"transport":[496,578,641],"mode.In":[497],"mode,":[500,579],"protection":[502],"provided":[504],"entire":[506],"IP":[507,524,532,557],"packets;":[508],"whole":[510],"packet":[511,533,585,605],"plus":[512],"fields":[514,591],"treated":[516],"new":[519],"payload":[520],"an":[522,631,728],"outer":[523,541],"packet,":[525],"own":[529],"header.The":[530],"original":[531,584],"said":[535],"encapsulated":[538],"within":[539],"packet.The":[542],"processing":[543],"usually":[544],"happens":[545],"gateways":[548],"behalf":[550],"endpoint;":[553],"thus,":[554,880],"inner":[556],"header":[558,581],"containing":[559],"address":[561],"endpoint":[564],"protected,":[568],"since":[569],"gateway":[571],"responsible":[574],"many":[576,747],"endpoints.In":[577],"itself":[586],"preserved,":[588],"some":[589,696,816,895],"inserted,":[593],"newly":[596],"formed":[597],"payload,":[598],"parts":[602,685],"header,":[606],"undergoes":[607],"processing.Transport":[609],"typically":[612],"end-to-end":[615],"security.In":[616],"mostly":[620],"setting":[623],"fixed":[626],"sender":[627],"receiver,":[629],"abstracted":[632],"underlying":[633,741],"network.Hence,":[635],"differences":[637],"between":[638,897],"relevance":[646],"further":[649],"discussion.":[650],"WorkSomewhat":[652],"sub-protocols":[655],"IPsec":[657,714,949],"were":[658],"designed":[660],"goal":[663],"mind,":[668],"fact":[671,947],"desired":[673],"goals":[675],"often":[677],"even":[679],"completely":[680],"stated.In":[681],"recent":[682],"years,":[683],"several":[684],"individual":[687],"analyzed":[694,727],"them":[698,963],"proven":[699],"secure.In":[702],"there":[705],"exists":[706],"positive":[708,721],"negative":[710],"results":[711,861,882,901],"sub-protocols.Regarding":[715],"side,":[722],"Canetti":[723],"Krawczyk":[725],"[9]":[726],"early":[729],"IKE.They":[732],"provide":[733,764],"IKE,":[738,907,959],"sign-and-mac":[742],"(SIGMA)":[743],"protocols.However,":[744],"they":[745,848,893,941],"details":[749],"derivation":[754,788],"from":[755],"group":[758],"element.Then,":[759],"[25],":[761],"authors":[763,917],"first":[766,904],"systematic":[767],"description":[768],"development":[771],"rationale":[773],"SIGMA":[776],"protocols.Various":[777],"work":[778,875,944],"performed":[781],"order":[783],"validate":[785,849],"mechanism":[789],"IKE":[792,823,853,891],"standard":[795],"model;":[796],"however,":[797],"these":[800],"papers":[801],"do":[802,883,918],"precisely":[804],"but":[808],"discuss":[810,920],"description,":[813],"isolated":[817],"primitives":[818],"being":[819,913],"part":[820],"protocol.Dodis":[824],"et":[825,938],"al.":[826,939],"[13]":[827],"showed":[828],"idealized":[830],"versions":[831],"PRFs":[835],"IKE-namely":[838],"CBC,":[839],"Cascade":[840],"HMAC":[842],"modes-serve":[843],"randomness":[846],"extractors.Thus,":[847],"PRF":[857],"derivation.Those":[860],"later":[863],"revisited":[865],"[17],":[867],"remark":[869],"previous":[874],"considered":[876],"and,":[879],"necessarily":[885],"directly":[886],"translate":[887],"full":[890],"protocol.Indeed,":[892],"gaps":[896],"existing":[899],"due":[908],"nonces":[911],"properly":[914],"authenticated.However,":[915],"detail.Moreover,":[923],"hashed":[927],"exchanges":[929],"over":[930],"non-DDH":[931],"groups":[932,954],"Gennaro":[937],"[17].Notably,":[940],"motivate":[942],"standardizes":[950],"couple":[952],"non":[961],"satisfying":[964],"DDH-assumption.Related":[966],"cryptography,":[972],"3.2":[973],"Unauthenticated":[974],"(IKE_SA_INIT)":[976]},"counts_by_year":[{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1}],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2016-06-24T00:00:00"}