5. (10 points) Two hosts A and B wish to communicate securely. In one configurat

Question

5. (10 points) Two hosts A and B wish to communicate securely. In one configuration, A and B establish a single ESP SA providing both authentication and encryption. In a second configuration A and B establish a ESP SA providing only encryption, but this traffic is intercepted by two gateways that provide authentication to all traffic between A and B using an AH IPSec SA. What is the difference in the protection level provided by these two configurations? What is the difference in the overhead required by these two configurations?

Explanation / Answer

The ESP(with encryption) is quite different from the ESP(with encryption and authentication both) in many aspects. They are listed below.

1. Connectionless Integrity is present in the one with encryption and authentication both while that is not the case with only the encryption one.

2. Data Origin Authentication is only provided in the latterr one and not in the former one.

And, as we talk about overheads, The one with the duo format has more overhead than with the one that only has encryption.

Related Questions

Navigate

• Browse (All)
• Browse 5
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.