A quick CGA generation method

Abstract

IPv6 uses Neighbor Discovery Protocol (NDP) to perform neighbor discovery in link-local scope. Since NDP itself has no security mechanism, Secure Neighbor Discovery protocol (SEND) is designed to protect NDP. SEND is based on the usage of an asymmetric key pair, and provides security mechanism by using Crypto Generated Address (CGA), digital signature and X.509 certification. Since CGA generation might be a time-consuming process, in this paper we present a modified CGA generation method that allows a newly connected node to generate a CGA address quickly. The method requires adding a key-pair server node to perform a part of CGA generation computation in advance. Since the most time-consuming calculation is performed on the server beforehand, the CGA generation time is shortened significantly.