Bibliography

1

3GPP (3rd Generation Partnership Project).
Ts 33.102 v5.1.0: Technical specification group services and system aspects; 3g security; security architecture (release 5), Dec. 2002.

2

B. Aboba.
A Model for Context Transfer in IEEE 802, Oct. 2003.
Work in Progress.

3

B. Aboba.
EAP Key Management Framework, Oct. 2003.
Work in Progress.

4

B. Aboba, P. Calhoun, S. Glass, T. Hiller, P. McCann, H. Shiino, G. Zorn, G. Dommety, C. Perkins, B. Patil, D. Mitton, S. Manning, M. Beadles, P. Walsh, X. Chen, S. Sivalingham, A. Hameed, M. Munson, S. Jacobs, B. Lim, B. Hirschman, R. Hsu, Y. Xu, E. Campbell, S. Baba, and E. Jaques.
RFC 2989: Criteria for Evaluating AAA Protocols for Network Access, Nov. 2000.
Status: Informational.

5

B. Aboba and D. Simon.
RFC 2716: PPP EAP TLS Authentication Protocol, Oct. 1999.
Status: Experimental.

6

B. Aboba and J. Wood.
RFC 3539: Authentication, Authorization and Accounting (AAA) Transport Profile, June 2003.
Status: Proposed Standard.

7

B. Aboba, G. Zorn, and D. Mitton.
RFC 3162: RADIUS and IPv6, Aug. 2001.
Status: Proposed Standard.

8

C. Adams.
RFC 2025: The Simple Public-Key GSS-API Mechanism (SPKM), Oct. 1996.
Status: Proposed Standard.

9

C. Adams, P. Cain, D. Pinkas, and R. Zuccherato.
RFC 3161: Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP), Aug. 2001.
Status: Proposed Standard.

10

C. Adams and S. Farrell.
RFC 2510: Internet X.509 Public Key Infrastructure Certificate Management Protocols, Mar. 1999.
Status: Proposed Standard.

11

J. Altman and F. da Cruz.
RFC 2840: TELNET KERMIT OPTION, May 2000.
Status: Informational.

12

R. Arends.
Protocol Modifications for the DNS Security Extensions, Oct. 2003.
Work in Progress.

13

R. Arends.
Resource Records for DNS Security Extensions, Oct. 2003.
Work in Progress.

14

R. Arends, R. Austein, D. Massey, M. Larson, and S. Rose.
DNS Security Introduction and Requirements, Oct. 2003.
Work in Progress.

15

J. Arkko and H. Haverinen.
EAP AKA Authentication, Oct. 2003.
Work in Progress.

16

J. Arkko, V. Torvinen, G. Camarillo, A. Niemi, and T. Haukka.
RFC 3329: Security Mechanism Agreement for the Session Initiation Protocol (SIP), Jan. 2003.
Status: Proposed Standard.

17

A. Arsenault and S. Farrell.
RFC 3157: Securely Available Credentials - Requirements, Aug. 2001.
Status: Informational.

18

N. Asokan, V. Niemi, and K. Nyberg.
Man-in-the-middle in tunnelled authentication.
In Proceedings of the 11th International Workshop on Security Protocols, LNCS, Cambridge, UK, Apr. 2003.
To be published by Springer-Verlag.

19

N. Asokan, V. Shoup, and M. Waidner.
Asynchronous protocols for optimistic fair exchange.
In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 86-99, 1998.

20

D. Atkins and R. Austein.
Threat Analysis Of The Domain Name System, Oct. 2003.
Work in Progress.

21

D. Atkins and G. Klyne.
Common Presence and Instant Messaging: Message Format, Jan. 2003.
Work in Progress.

22

T. Aura.
Cryptographically Generated Addresses (CGA), Feb. 2003.
Work in Progress.

23

T. Aura.
Cryptographically generated addresses (CGA).
In Proc. 6th Information Security Conference (ISC'03), LNCS, Bristol, UK, Oct. 2003. Springer.

24

T. Aura.
Cryptographically Generated Addresses (CGA), Oct. 2003.
Work in Progress.

25

T. Aura, M. Roe, and J. Arkko.
Security of internet location management.
In Proc. 18th Annual Computer Security Applications Conference, pages 78-87, Las Vegas, NV USA, Dec. 2002. IEEE Press.

26

F. Baker, B. Lindell, and M. Talwar.
RFC 2747: RSVP Cryptographic Authentication, Jan. 2000.
Status: Proposed Standard.

27

M. Barnes.
A Mechanism to Secure SIP Identity headers inserted by Intermediaries, Oct. 2003.
Work in Progress.

28

M. Beadles and D. Mitton.
RFC 3169: Criteria for Evaluating Network Access Server Protocols, Sept. 2001.
Status: Informational.

29

L. Bell, D. Romascanu, and B. Aboba.
History of the IEEE 802/IETF Relationship, June 2003.
Work in Progress.

30

M. Bellare, D. Pointcheval, and P. Rogaway.
Authenticated key exchange secure against dictionary attacks.
In Proceedings of Eurocrypt 2000, LNCS 1807. Springer-Verlag, 2000.

31

M. Bellare and R. Sandhu.
The security of a family of two-party RSA signature schemes.
Technical Report 2001/060, 2001.

32

S. Bellovin.
RFC 2316: Report of the IAB Security Architecture Workshop, Apr. 1998.
Status: Informational.

33

S. Bellovin, C. Kaufman, and J. Schiller.
Security Mechanisms for the Internet, July 2003.
Work in Progress.

34

S. Bellovin and M. Merritt.
Encrypted Key Exchange: Password-based protocols secure against dictionary attacks.
In Proceedings of the IEEE Symposium on Research in Security and Privacy, May 1992.

35

S. Bellovin and M. Merritt.
Augmented encrypted key exchange: a password-based protocol secure against dictionary attacks and password file compromise, 1993.

36

L. Berger and T. O'Malley.
RFC 2207: RSVP Extensions for IPSEC Data Flows, Sept. 1997.
Status: Proposed Standard.

37

L. Blunk.
Extensible Authentication Protocol (EAP), Sept. 2003.
Work in Progress.

38

L. Blunk and J. Vollbrecht.
RFC 2284: PPP Extensible Authentication Protocol (EAP), Mar. 1998.
Status: Proposed Standard.

39

C. Boyd and A. Mathuria.
Key establishment protocols for secure mobile communications: A selective survey.
Lecture Notes in Computer Science, 1438:344ff, 1998.

40

R. Braden, L. Zhang, S. Berson, S. Herzog, and S. Jamin.
RFC 2205: Resource ReSerVation Protocol (RSVP) - Version 1 Functional Specification, Sept. 1997.
Status: Proposed Standard.

41

S. Bradner, A. Mankin, and J. Schiller.
A Framework for Purpose-Built Keys (PBK), June 2003.
Work in Progress.

42

M. Brunner.
Requirements for Signaling Protocols, Aug. 2003.
Work in Progress.

43

P. Calhoun, T. Johansson, and C. Perkins.
Diameter Mobile IPv4 Application, Oct. 2003.
Work in Progress.

44

P. Calhoun, J. Loughney, E. Guttman, G. Zorn, and J. Arkko.
RFC 3588: Diameter Base Protocol, Sept. 2003.
Status: Proposed Standard.

45

P. Calhoun, G. Zorn, D. Spence, and D. Mitton.
Diameter Network Access Server Application, Oct. 2003.
Work in Progress.

46

R. Canetti, A. Perrig, and B. Whillock.
TESLA: Multicast Source Authentication Transform Specification, Oct. 2002.
Work in Progress.

47

P. Congdon, B. Aboba, A. Smith, G. Zorn, and J. Roese.
RFC 3580: IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines, Sept. 2003.
Status: Informational.

48

D. Conrad.
RFC 3225: Indicating Resolver Support of DNSSEC, Dec. 2001.
Status: Proposed Standard.

49

M. Crispin.
RFC 2060: Internet Message Access Protocol - Version 4rev1, Dec. 1996.
Status: Proposed Standard.

50

D. Crocker.
RFC 1767: MIME Encapsulation of EDI Objects, Mar. 1995.
Status: Proposed Standard.

51

J. Cuellar, J. Morris, and D. Mulligan.
Geopriv requirements, Oct. 2003.
Work in Progress.

52

M. Day, S. Aggarwal, G. Mohr, and J. Vincent.
RFC 2779: Instant Messaging / Presence Protocol Requirements, Feb. 2000.
Status: Informational.

53

M. Day, J. Rosenberg, and H. Sugano.
RFC 2778: A Model for Presence and Instant Messaging, Feb. 2000.
Status: Informational.

54

T. Dierks and C. Allen.
RFC 2246: The TLS Protocol Version 1.0, Jan. 1999.
Status: Proposed Standard.

55

T. Dierks and E. Rescorla.
The TLS Protocol Version 1.1, July 2003.
Work in Progress.

56

R. Droms and W. Arbaugh.
RFC 3118: Authentication for DHCP Messages, June 2001.
Status: Proposed Standard.

57

D. Eastlake 3rd.
RFC 2137: Secure Domain Name System Dynamic Update, Apr. 1997.
Status: Proposed Standard.

58

D. Eastlake 3rd.
RFC 2535: Domain Name System Security Extensions, Mar. 1999.
Status: Proposed Standard.

59

D. Eastlake 3rd.
RFC 2930: Secret Key Establishment for DNS (TKEY RR), Sept. 2000.
Status: Proposed Standard.

60

D. Eastlake 3rd.
RFC 2931: DNS Request and Transaction Signatures ( SIG(0)s ), Sept. 2000.
Status: Proposed Standard.

61

M. Eisler.
RFC 2847: LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM, June 2000.
Status: Proposed Standard.

62

J. Elwell.
User identification in a SIP/QSIG environment, May 2003.
Work in Progress.

63

R. Elz and R. Bush.
RFC 2181: Clarifications to the DNS Specification, July 1997.
Status: Proposed Standard.

64

P. Eronen, T. Hiller, and G. Zorn.
Diameter Extensible Authentication Protocol (EAP) Application, Oct. 2003.
Work in Progress.

65

M. D. et al.
Threat Analysis of the geopriv Protocol, Sept. 2003.
Accepted as an Informational RFC.

66

S. Farrell.
Securely Available Credentials Protocol, June 2003.
Work in Progress.

67

D. Forsberg.
Protocol for Carrying Authentication for Network Access (PANA), Oct. 2003.
Work in Progress.

68

M. Forssen and F. Cusack.
Generic Message Exchange Authentication For SSH, Apr. 2003.
Work in Progress.

69

J. Franks, P. Hallam-Baker, J. Hostetler, S. Lawrence, P. Leach, A. Luotonen, and L. Stewart.
RFC 2617: HTTP Authentication: Basic and Digest Access Authentication, June 1999.
Status: Draft Standard.

70

M. Friedl, N. Provos, and W. Simpson.
Diffie-Hellman Group Exchange for the SSH Transport Layer Protocol, July 2003.
Work in Progress.

71

P. Funk and S. Blake-Wilson.
EAP Tunneled TLS Authentication Protocol (EAP-TTLS), Aug. 2003.
Work in Progress.

72

J. Galvin, S. Murphy, S. Crocker, and N. Freed.
RFC 1847: Security Multiparts for MIME: Multipart/Signed and Multipart/Encrypted, Oct. 1995.
Status: Proposed Standard.

73

O. Gudmundsson.
RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements, Dec. 2001.
Status: Proposed Standard.

74

D. Gustafson, M. Just, and M. Nystrom.
Securely Available Credentials - Credential Server Framework, June 2003.
Work in Progress.

75

P. Gutmann.
Use of Shared Keys in the TLS Protocol, Oct. 2003.
Work in Progress.

76

E. Guttman, C. Perkins, J. Veizades, and M. Day.
RFC 2608: Service Location Protocol, Version 2, June 1999.
Status: Proposed Standard.

77

N. Haller.
RFC 1760: The S/KEY One-Time Password System, Feb. 1995.
Status: Informational.

78

N. Haller, C. Metz, P. Nesser, and M. Straw.
RFC 2289: A One-Time Password System, Feb. 1998.
Status: Standard.

79

R. Hancock.
Next Steps in Signaling: Framework, Oct. 2003.
Work in Progress.

80

T. Harding, R. Drummond, and C. Shih.
RFC 3335: MIME-based Secure Peer-to-Peer Business Data Interchange over the Internet, Sept. 2002.
Status: Proposed Standard.

81

D. Harkins and D. Carrel.
RFC 2409: The Internet Key Exchange (IKE), Nov. 1998.
Status: Proposed Standard.

82

H. Haverinen and J. Salowey.
EAP SIM Authentication, Oct. 2003.
Work in Progress.

83

Y.-G. Hong.
Considerations of FMIPv6 in 802.11 networks, June 2003.
Work in Progress.

84

G. Horn and B. Preneel.
Authentication and payment in future mobile systems.
In ESORICS: European Symposium on Research in Computer Security. LNCS, Springer-Verlag, 1998.

85

R. Housley.
RFC 3369: Cryptographic Message Syntax (CMS), Aug. 2002.
Status: Proposed Standard.

86

R. Housley.
RFC 3370: Cryptographic Message Syntax (CMS) Algorithms, Aug. 2002.
Status: Proposed Standard.

87

ISO/IEC.
ISO/IEC 7812-2: Information Processing Systems, Identification cards - Identification of Issuers, Part 2: Application and Registration Procedures , 1993.

88

ISO/IEC.
ISO/IEC 9798-3: Information technology - Security techniques - Entity authentication - Part 3: Mechanisms using digital signature techniques, 1997.

89

ITU.
ITU H.530: Symmetric security procedures for H.323 mobility in H.510, Oct. 2002.
Available through http://www.itu.int/ITU-T/studygroups/com16/index.html.

90

ITU.
ITU H.530 Corrigendum 1: Symmetric security procedures for H.323 mobility in H.510, July 2003.
Available through http://www.itu.int/ITU-T/studygroups/com16/index.html.

91

D. P. Jablon.
Strong password-only authenticated key exchange.
Computer Communication Review, 26(5):5-26, 1996.

92

C. Jennings, J. Peterson, and M. Watson.
RFC 3325: Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks, Nov. 2002.
Status: Informational.

93

D. Johnson, C. Perkins, and J. Arkko.
Mobility Support in IPv6, July 2003.
Work in Progress.

94

S. Josefsson, A. Palekar, D. Simon, and G. Zorn.
Protected EAP Protocol (PEAP), Oct. 2003.
Work in Progress.

95

C. Kaufman.
Internet Key Exchange (IKEv2) Protocol, Oct. 2003.
Work in Progress.

96

J. Kempf.
RFC 3374: Problem Description: Reasons For Performing Context Transfers Between Nodes in an IP Access Network, Sept. 2002.
Status: Informational.

97

J. Kempf.
Securing IPv6 Neighbor Discovery Using Address Based Keys (ABKs), May 2003.
Work in Progress.

98

S. Kent and R. Atkinson.
RFC 2401: Security Architecture for the Internet Protocol, Nov. 1998.
Status: Proposed Standard.

99

J. Klensin.
RFC 3467: Role of the Domain Name System (DNS), Feb. 2003.
Status: Informational.

100

J. Klensin, R. Catoe, and P. Krumviede.
RFC 2195: IMAP/POP AUTHorize Extension for Simple Challenge/Response, Sept. 1997.
Status: Proposed Standard.

101

J. Kohl and C. Neuman.
RFC 1510: The Kerberos Network Authentication Service (V5), Sept. 1993.
Status: Proposed Standard.

102

H. Krawczyk.
SKEME: A versatile secure key exchange mechanism for internet.
In IEEE Proceedings of the 1996 Symposium on Network and Distributed Systems Security. IEEE, 1996.

103

J. Laganier and G. Montenegro.
Using IKE with IPv6 Cryptographically Generated Address, July 2003.
Work in Progress.

104

M. Leech.
RFC 1929: Username/Password Authentication for SOCKS V5, Mar. 1996.
Status: Proposed Standard.

105

M. Leech, M. Ganis, Y. Lee, R. Kuris, D. Koblas, and L. Jones.
RFC 1928: SOCKS Protocol Version 5, Mar. 1996.
Status: Proposed Standard.

106

E. Lewis.
RFC 3090: DNS Security Extension Clarification on Zone Status, Mar. 2001.
Status: Proposed Standard.

107

L. Liberty Alliance Project.
Liberty ID-FF Bindings and Profiles Specification Version: 1.2, 2003.

108

M. Liebsch.
Candidate Access Router Discovery, Sept. 2003.
Work in Progress.

109

J. Loughney.
Context Transfer Protocol, Oct. 2003.
Work in Progress.

110

J. Loughney and G. Camarillo.
Authentication, Authorization and Accounting Requirements for the Session Initiation Protocol, June 2003.
Work in Progress.

111

C. Lynn.
Secure BGP (S-BGP), July 2003.
Work in Progress.

112

R. Mahy.
Discussion of suitability: S/MIME instead of Digest Authentication in the Session Initiation Protocol (SIP), July 2003.
Work in Progress.

113

D. Massey and S. Rose.
RFC 3445: Limiting the Scope of the KEY Resource Record (RR), Dec. 2002.
Status: Proposed Standard.

114

Mastercard and VISA.
SET Secure Electronic Transaction Specification, May 1977.

115

D. Maughan, M. Schertler, M. Schneider, and J. Turner.
RFC 2408: Internet Security Association and Key Management Protocol (ISAKMP), Nov. 1998.
Status: Proposed Standard.

116

D. McDonald, C. Metz, and B. Phan.
RFC 2367: PF_KEY Key Management API, Version 2, July 1998.
Status: Informational.

117

C. Meadows.
A cost-based framework for analysis of denial of service in networks.
Journal of Computer Security, to appear.

118

A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone.
Handbook of Applied Cryptography.
CRC Press, Oct. 1996.
Fifth Printing (August 2001).

119

C. Metz.
RFC 2243: OTP Extended Responses, Nov. 1997.
Status: Proposed Standard.

120

D. Mills.
Public-Key Cryptography for the Network Time Protocol Version 2, Nov. 2002.
Work in Progress.

121

P. Mockapetris.
RFC 1034: Domain names - concepts and facilities, Nov. 1987.
Status: Standard.

122

P. Mockapetris.
RFC 1035: Domain names - implementation and specification, Nov. 1987.
Status: Standard.

123

R. Moskowitz.
Host Identity Protocol Architecture, Oct. 2003.
Work in Progress.

124

R. Moskowitz, P. Nikander, and P. Jokela.
Host Identity Protocol, Oct. 2003.
Work in Progress.

125

S. Murphy.
BGP Security Vulnerabilities Analysis, June 2003.
Work in Progress.

126

J. Myers.
RFC 1731: IMAP4 Authentication Mechanisms, Dec. 1994.
Status: Proposed Standard.

127

J. Myers and M. Rose.
RFC 1939: Post Office Protocol - Version 3, May 1996.
Status: Standard.

128

T. Narten, E. Nordmark, and W. Simpson.
RFC 2461: Neighbor Discovery for IP Version 6 (IPv6), Dec. 1998.
Status: Draft Standard.

129

C. Neuman.
Integrating Single-use Authentication Mechanisms with Kerberos, Oct. 2003.
Work in Progress.

130

C. Neuman.
The Kerberos Network Authentication Service (V5), June 2003.
Work in Progress.

131

C. Newman.
RFC 2444: The One-Time-Password SASL Mechanism, Oct. 1998.
Status: Proposed Standard.

132

C. Newman and J. G. Myers.
RFC 2244: ACAP - Application Configuration Access Protocol, Nov. 1997.
Status: Proposed Standard.

133

J. Ng.
Extensions to BGP to Support Secure Origin BGP (soBGP), June 2003.
Work in Progress.

134

A. Niemi, J. Arkko, and V. Torvinen.
RFC 3310: Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA), Sept. 2002.
Status: Informational.

135

P. Nikander.
End-Host Mobility and Multi-Homing with Host Identity Protocol, June 2003.
Work in Progress.

136

P. Nikander.
IPv6 Neighbor Discovery trust models and threats, Oct. 2003.
Work in Progress.

137

P. Nikander.
Secure Neighbor Discovery using separate CGA extension header, June 2003.
Work in Progress.

138

K. Norseth.
Definitions for Port Access Control (IEEE 802.1X) MIB, July 2003.
Work in Progress.

139

Y. Ohba.
Problem Statement and Usage Scenarios for PANA, Apr. 2003.
Work in Progress.

140

H. Orman.
RFC 2412: The OAKLEY Key Determination Protocol, Nov. 1998.
Status: Informational.

141

S. Park.
802.11 Mobility Framework Supporting GPRS Handover, June 2003.
Work in Progress.

142

S. Park.
IPv6 DAD Consideration for 802.11 Environment, July 2003.
Work in Progress.

143

Y.-J. Park and Y. Mun.
Layer 2 Handoff for Mobile-IPv4 with 802.11, Oct. 2003.
Work in Progress.

144

M. Parthasarathy.
PANA Threat Analysis and security requirements, May 2003.
Work in Progress.

145

B. Patel, B. Aboba, S. Kelly, and V. Gupta.
RFC 3456: Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode, Jan. 2003.
Status: Proposed Standard.

146

C. Perkins.
Mobile IPv4 Challenge/Response Extensions (revised), Oct. 2003.
Work in Progress.

147

C. Perkins and P. Calhoun.
AAA Registration Keys for Mobile IPv4, Oct. 2003.
Work in Progress.

148

A. Perrig.
TESLA: Multicast Source Authentication Transform Introduction, Oct. 2002.
Work in Progress.

149

J. Peterson.
RFC 3323: A Privacy Mechanism for the Session Initiation Protocol (SIP), Nov. 2002.
Status: Proposed Standard.

150

J. Peterson.
Address Resolution for Instant Messaging and Presence, Oct. 2003.
Work in Progress.

151

J. Peterson.
Common Profile for Instant Messaging (CPIM), Oct. 2003.
Work in Progress.

152

J. Peterson.
Common Profile for Presence (CPP), Oct. 2003.
Work in Progress.

153

J. Peterson.
Enhancements for Authenticated Identity Management in the Session Initiation Protocol (SIP), Mar. 2003.
Work in Progress.

154

J. Peterson.
Role-based Authorization Requirements for the Session Initiation Protocol, Oct. 2003.
Work in Progress.

155

J. Peterson.
SIP Authenticated Identity Body (AIB) Format, July 2003.
Work in Progress.

156

B. Pfitzmann and M. Waidner.
Token-based web single signon with enabled clients.

157

J. Puthenkulam.
The Compound Authentication Binding Problem, Oct. 2003.
Work in Progress.

158

Y. Rekhter.
A Border Gateway Protocol 4 (BGP-4), Oct. 2003.
Work in Progress.

159

E. Rescorla.
A Survey of Authentication Mechanisms, Oct. 2003.
Work in Progress.

160

E. Rescorla and B. Korver.
RFC 3552: Guidelines for Writing RFC Text on Security Considerations, July 2003.
Status: Best Current Practice.

161

C. Rigney, W. Willats, and P. Calhoun.
RFC 2869: RADIUS Extensions, June 2000.
Status: Informational.

162

C. Rigney, S. Willens, A. Rubens, and W. Simpson.
RFC 2865: Remote Authentication Dial In User Service (RADIUS), June 2000.
Status: Draft Standard.

163

S. Rose.
DNS Request and Transaction Signatures ( SIG(0)s ), Aug. 2003.
Work in Progress.

164

J. Rosenberg.
A Presence Event Package for the Session Initiation Protocol (SIP), Jan. 2003.
Work in Progress.

165

J. Rosenberg.
A Session Initiation Protocol (SIP) Event Package for Modification Events for the Extensible Markup Language (XML) Configuration Access Protocol (XCAP) Managed Documents, June 2003.
Work in Progress.

166

J. Rosenberg.
An Extensible Markup Language (XML) Configuration Access Protocol (XCAP) Usage for Presence Lists, Oct. 2003.
Work in Progress.

167

J. Rosenberg.
Extensible Markup Language (XML) Configuration Access Protocol (XCAP)Usages for Setting Presence Authorization, Oct. 2003.
Work in Progress.

168

J. Rosenberg.
The Extensible Markup Language (XML) Configuration Access Protocol (XCAP), Oct. 2003.
Work in Progress.

169

J. Rosenberg and H. Schulzrinne.
RFC 3262: Reliability of Provisional Responses in Session Initiation Protocol (SIP), June 2002.
Status: Proposed Standard.

170

J. Rosenberg and H. Schulzrinne.
RFC 3263: Session Initiation Protocol (SIP): Locating SIP Servers, June 2002.
Status: Proposed Standard.

171

J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler.
RFC 3261: SIP: Session Initiation Protocol, June 2002.
Status: Proposed Standard.

172

RSA.
Secureid hardware token and software tokens, 2003.
http://www.rsasecurity.com/products/securid/hardware_token.html.

173

H. Schulzrinne.
RPID - Rich Presence Information Data Format, July 2003.
Work in Progress.

174

R. Shirey.
RFC 2828: Internet Security Glossary, May 2000.
Status: Informational.

175

B. Sommerfeld.
Requirements for an IPsec API, June 2003.
Work in Progress.

176

M. Steiner, G. Tsudik, and M. Waidner.
Refinement and extension of encrypted key exchange.
Operating Systems Review, 29:22-30, July 1995.

177

H. Sugano and S. Fujimoto.
Presence Information Data Format (PIDF), May 2003.
Work in Progress.

178

M. Swift, J. Trostle, and J. Brezak.
RFC 3244: Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols, Feb. 2002.
Status: Informational.

179

P. Tan.
Recommendations for Achieving Seamless IPv6 Handover in IEEE 802.11 Networks, Mar. 2003.
Work in Progress.

180

D. Taylor.
Using SRP for TLS Authentication, June 2003.
Work in Progress.

181

M. Thomas.
RFC 3129: Requirements for Kerberized Internet Negotiation of Keys, June 2001.
Status: Informational.

182

M. Thomas and J. Vilhuber.
Kerberized Internet Negotiation of Keys (KINK), Jan. 2003.
Work in Progress.

183

S. Thomson and T. Narten.
RFC 2462: IPv6 Stateless Address Autoconfiguration, Dec. 1998.
Status: Draft Standard.

184

D. Trossen, G. Krishnamurthi, H. Chaskar, and J. Kempf.
Issues in candidate access router discovery for seamless IP-level handoffs, Oct. 2002.
Work in Progress.

185

J. Trostle, M. Swift, J. Brezak, and B. Gossman.
Kerberos Set/Change Password: Version 2, May 2001.
Work in Progress.

186

H. Tschofenig.
Bootstrapping RFC3118 Delayed authentication using PANA, Oct. 2003.
Work in Progress.

187

H. Tschofenig.
QoS NSLP Authorization Issues, June 2003.
Work in Progress.

188

H. Tschofenig.
RSVP Security Properties, Oct. 2003.
Work in Progress.

189

H. Tschofenig.
Security Implications of the Session Identifier, June 2003.
Work in Progress.

190

H. Tschofenig and D. Atkins.
Bootstrapping Kerberos, Jan. 2003.
Work in Progress.

191

H. Tschofenig and D. Kroeselberg.
EAP IKEv2 Method (EAP-IKEv2), Oct. 2003.
Work in Progress.

192

H. Tschofenig and D. Kroeselberg.
Security Threats for NSIS, Oct. 2003.
Work in Progress.

193

T. Ts'o.
RFC 2942: Telnet Authentication: Kerberos Version 5, Sept. 2000.
Status: Proposed Standard.

194

T. Ts'o.
RFC 2946: Telnet Data Encryption Option, Sept. 2000.
Status: Proposed Standard.

195

T. Ts'o and J. Altman.
RFC 2941: Telnet Authentication Option, Sept. 2000.
Status: Proposed Standard.

196

S. Turner.
CMS Symmetric Key Management and Distribution, Jan. 2003.
Work in Progress.

197

V. Venkataramanan.
Enhancements to Asserted Identity to Enable Called Party Name Delivery using SIP, June 2003.
Work in Progress.

198

P. Vixie, O. Gudmundsson, D. Eastlake 3rd, and B. Wellington.
RFC 2845: Secret Key Transaction Authentication for DNS (TSIG), May 2000.
Status: Proposed Standard.

199

J. Vollbrecht.
State Machines for EAP Peer and Authenticator, Oct. 2003.
Work in Progress.

200

M. Wagle and R. Aradhaya.
An Out-of-Band authentication procedure for SIP, Feb. 2003.
Work in Progress.

201

J. Walker and R. Housley.
The EAP Archie Protocol, June 2003.
Work in Progress.

202

M. Watson.
RFC 3324: Short Term Requirements for Network Asserted Identity, Nov. 2002.
Status: Informational.

203

B. Wellington.
RFC 3007: Secure Domain Name System (DNS) Dynamic Update, Nov. 2000.
Status: Proposed Standard.

204

B. Wellington.
RFC 3008: Domain Name System Security (DNSSEC) Signing Authority, Nov. 2000.
Status: Proposed Standard.

205

B. Wellington and O. Gudmundsson.
Redefinition of DNS AD bit, June 2002.
Work in Progress.

206

I. . working group.
Medium access control (mac) security enhancements, Sept. 2003.

207

T. Wu.
RFC 2944: Telnet Authentication: SRP, Sept. 2000.
Status: Proposed Standard.

208

T. Wu.
RFC 2945: The SRP Authentication and Key Exchange System, Sept. 2000.
Status: Proposed Standard.

209

S. Yadav, R. Yavatkar, R. Pabbati, P. Ford, T. Moore, S. Herzog, and R. Hess.
RFC 3182: Identity Representation for RSVP, Oct. 2001.
Status: Proposed Standard.

210

A. Yegin and Y. Ohba.
Protocol for Carrying Authentication for Network Access (PANA)Requirements, June 2003.
Work in Progress.

211

T. Ylonen, T. Kivinen, M. J. Saarinen, T. Rinne, and S. Lehtinen.
SSH Authentication Protocol, Oct. 2003.
Work in Progress.

212

T. Ylonen, T. Kivinen, M. J. Saarinen, T. Rinne, and S. Lehtinen.
SSH Protocol Architecture, Oct. 2003.
Work in Progress.

213

T. Ylonen, T. Kivinen, M. J. Saarinen, T. Rinne, and S. Lehtinen.
SSH Transport Layer Protocol, Oct. 2003.
Work in Progress.

214

R. Zhang.
Extended IEEE802.1x Support Authentication of users sharing a Single Ethernet Port, Oct. 2002.
Work in Progress.

215

J. Zhou and D. Gollmann.
A fair non-repudiation protocol.
In Proc. of the 15th IEEE Symposium on Security and Privacy, pages 55-61. IEEE Computer Society Press, 1996.

216

G. Zorn.
RFC 2759: Microsoft PPP CHAP Extensions, Version 2, Jan. 2000.
Status: Informational.

217

R. Zuccherato and M. Nystrom.
RFC 3163: ISO/IEC 9798-3 Authentication SASL Mechanism, Aug. 2001.
Status: Experimental.