Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Is the KIV-21 susceptible to spoofing?

April 26, 2017kiv-21 spoofing susceptible

0

Posted

Is the KIV-21 susceptible to spoofing?

1 Answer

0

Posted

RECIPe messages are unencrypted and thus are vulnerable to spoofing, and have thepotential to disclose Red destination addresses and their associations with Clearaddresses. KIV-21 uses MproxyARP to identify the KIV-21 that protects a particular Reddestination. The MproxyARP Query is addressed to the multicast address of the domainand does not require a static route to find the correct remote KIV-21. Only the multicastaddress and its PPK need be defined in advance. MproxyARP Messages areencrypted.