Title: Security of IPv6 WG activity report in 2003 Author(s): $BW"3$(B $BNPN$(B (hiromi@inetcore.com) $B6aF#(B $B8-;V(B (satoshi_kondo@trendmicro.co.jp) Date: 09/10/2004 < $BL\ 1. $B$O$8$a$K(B 2. WG$B3567(B 3. White Paper $BAG0F(B 4. $BE:IU;qNA(B 5. $B3F2s$N5D;vO?(B 1. $B$O$8$a$K(B $B!V(BSecurity of IPv6$B!W(B(secure-6 WG)$B$O!"(BIPv6$B%M%C%H%o!<%/4D6-$K$*$1$k(B $B%;%-%e%j%F%#$N$"$jJ}$r5DO@!"Ds8@$9$k$?$a$K(B 2003$BG/(B9$B7n$+$i3hF0$7$F$$$k!#(B $B!!(BIPv6$B4D6-$G$O!"=>Mh$N7W;;5!$HDL?.5!4o$K$h$k9=@.$+$i!">pJs2HEE$d%;%s%5!<(B $B5!4o$J$I?H$N2s$j$N$"$i$f$k$b$N$N@\B3$,MF0W$K$J$k$HL\$5$l$F$*$j!"(B $B%M%C%H%o!<%/7ABV$b%b%P%$%k@-$,9b$^$j!"$3$l$^$G$N%U%!%$%"!<%&%)!<%k(B $B$rCf?4$H$7$?%;%-%e%j%F%#@_7W;WA[$H$ON10UE@$,0[$J$C$F$/$k$H;W$o$l$k!#(B secure-6 WG $B$G$O!">pJs2HEE%M%C%H%o!<%/!"%b%P%$%k!"F0E*$J%;%-%e%j%F%#(B $B%&%)!<%k%M%C%H%o!<%/$J$I$rBP>]$K!"3F%M%C%H%o!<%/%b%G%k$4$H$KLdBjNN0h$r(B $BFCDj$7!"%"%I%P%$%6%j$d%f!<%6$N7DxEY$G$N5DO@$r9T$C$?!#(B $B%V%l%$%s%9%H!<%_%s%0Mh$N(Bv4-$B%U%!%$%"!<%&%)!<%k$H$O(B $B!&%U%!%$%"!<%&%)!<%k$K5a$a$k$b$N(B $B!&(Bv6$B$G$"$k$3$H$NN10UE@(B $B!&(BDoS$BH=Dj$OJL5DO@$7$?$$(B $B!!5DO@$K$"$?$C$F$N6&DL!&=EMW3NG';v9`$H$7$F!"!V%U%!%$%"!<%&%)!<%k$K5a$a$k(B $B5!G=!W$K$O!"(B $B-!(B $B30$+$i$N%"%?%C%/$HCf$+$i$N%"%?%C%/KI8f$,$G$-$k(B $B-"(B $B4IM}%]%$%s%H$N6-3&@~$G$"$k(B $B-#(B $B30$G46@w!"Cf$GHK?#$NKI;_$r$9$k(B $B$,$"$j!"(BIPv6$B%M%C%H%o!<%/$G$"$kE@$K$D$$$F!"0J2<$N(B3$B$D$NN10UE@$,$"$2$i$l$?!#(B $B-!(B non-pc$B$J$I$X$N9-$,$j$r9MN8$7$J$/$F$O$$$1$J$$(B $B-"(B IPsec$B$NMxMQ$K$h$kJQ2=$r9MN8$7$J$/$F$O$$$1$J$$(B $B-#(B entity$BH=CGJ}K!$r;}$DI,MW$,$"$k(B $B!!$3$N%V%l%$%s%9%H!<%_%s%0$G$O!"4uK>$9$k2r$H$7$F(B (1) IPv6$B;~Be$N%U%!%$%"!<%&%)!<%k%b%G%k3NN)$5$;$?$$(B (2) IPv6$B$NMxMQJ}K!$r0U<1$7$?%U%!%$%"!<%&%)!<%k$r:n$j$?$$(B $B$N(B2$BE@$r9g0U$7!";62q$7$?!#(B 2.3 WG$BH/B-!"$=$N8e(B $B!!(B2003$BG/(B9$B7n(B9$BF|$N(BWIDE$B9g=I$K$F(BBOF$B3+:E$r5^n17hDj$7!"uBV!"@)8B$d5v2D$9$kL\E*$dBP>]!"$=$NJ}K!!"N`;w(B $BNc$N%1!<%9%9%?%G%#$J$IB?4t$K$o$?$C$F!"5DO@$7$?!#5DO@$K;22C$G$-$J$+$C$?(B $B?M$+$i$N%3%a%s%H$O%a!<%j%s%0%j%9%H$r3hMQ$7<}=8$7$F$$$k!#(B $B!!J?9T$7$F(B white paper $B:n@.$K8~$1$F$N@0M}$b9T$J$C$?!#(B 3. White Paper $BAG0F(B $B!!(B2003$BG/$Ke$2$i$l$k$,!"$=$l$i$N%;%-%e%j%F%#BP:v$O$9$G$K8B3&$r(B $B7^$($F$$$k!#(B $B!&AH?%Fb$O0BA4$H$$$&88A[(B $B!&A4%H%i%U%#%C%/8!::$H%9%k!<%W%C%H(B $B!&#P#2#P$J$I?7$7$$%"%W%j%1!<%7%g%s!&%5!<%S%9$H$N?FOB@-(B $B!&30It$+$i$N0BA4$J%"%/%;%9(B $B!&C$NCZL@$7(B $B$J$1$l$P%M%C%H%o!<%/$K;22C$9$k$3$H$r5v2D$7$J$$!#$"$k$$$O2?$i$+$N@)8B$r9T(B $B$&!#$3$N$h$&$K%M%C%H%o!<%/$N=*CZ$9$k$3$H$K$h$C$F!"%M%C%H%o!<%/$K<+M3$K@\B3!&0\F0$9$k%N!<%I(B $B$KBP$7$F$b!"%;%0%a%s%HFb$K%;%-%e%j%F%#%]%j%7!<$K0cH?$7$?4m81$JC]%H%i%U%#%C%/$N9J9~$_(B $B!!$^$?!"%o!<%`$J$I$N8!::$J$IDL?.%Q%1%C%H$KBP$9$k>\:Y$J8!::!&8!>Z$NBP>]$H(B $B$7$F!"$3$l$i$N0BA4@-$,J]>Z$5$l$F$$$J$$CJ$-8=Z$9$k$3$H$K$h$C$F!"C2A(B $B!!0BA4@-$N8!>Z!&8!1V3NG'$K$O!"2<5-$N$h$&$JH9g(B $B!!@=IJ$N@=B$H9g$7$FH=CG$9$k!#!JAH$_9~$_7O5!4o$J$I!"=P2Y8e$KFbIt(B $B$N%=%U%H%&%'%"!&%U%!!<%`%&%'%"$N=q$-49$($J$I$,Hf3SE*>/$J$$5!4o$J$I$N>l(B $B9g!K(B $B!&%;%-%e%j%F%#BP:v%=%U%H$K$h$k8!::!&I>2A7k2L(B $B!!@HZ%W%m%0%i%`!&%"%s%A%&%#%k%9%=%U%H%&%'%"$J$I$K$h$k!"C2A$r4p=`$KH=CG$9$k!#$3$l$i$NI>2A7k2L$K$D$$$F$OM-8z4|8B$r@_$1!"E,;~8!(B $B::7k2L$r99?7$9$k!#(B $B!&%f!<%6G'>Z$J$I4{B8$NG'>Z%7%9%F%`$H$NO"7H(B $B%M%C%H%o!<%/G'>Z$G$O!"(BRADIUS$B$NMxMQ!"(BSSH$B$NMxMQ!"(BIEEE802.1x$B$NMxMQ$J$I$,(B $B$"$j!"4pK\E*$K%M%C%H%o!<%/$K@\B3$9$k:]$KG'>Z$5$l$k;EAH$_$G$"$k!#$3$l$K(B $BBP$7$F!"(BIPsec$B$d(BSSL$B$H$$$C$?%W%m%H%3%k$O%"%W%j%1!<%7%g%s$KAH$_9~$`$3$H$,(B $BMF0W$G$"$k!#(B $B""!!%M%C%H%o!<%/%;%0%a%s%H!&AH?%$J$I$N0BA4@-I>2A(B $B!!AH?%$r4V$N3FDL?.$N8!1V8!::$NI>2A4p=`$H$7$F!"Aj2A!&3NG'2A$H<+?H$N%;%-%e%j%F(B $B%#%]%j%7!<$rHf3S$7!"8!>ZBP>]$H$J$kAj]$H$9$k!#(B $B""!!%;%-%e%j%F%#4F::!&I>2A5!4X(B $B!!%;%0%a%s%H$N0BA4@-$rI>2A!&3NG'$9$k2ACM$H$7$F%;%-%e%j%F%#4F::!J3JIU$1!K5!4X$K$h$kI>2ACM(B $B$rMxMQ$9$k!#(B $B!!%;%-%e%j%F%#4F::!&I>2A5!4X$O!"3F%5%$%H$N0BA4@-$rDj4|E*$K%b%K%?$7!"%"%;(B $B%9%a%s%H7k2L$K4p$E$$$F0BA4@-$NI>2A$r9T$&!#I>2A$O!"Dj4|E*$K9T$o$l!"I>2AFb(B $BMF$K1~$8$F99?7$7!"$^$?$=$NI>2A7k2L$*$h$S]AH?%$N%;%-%e%j%F%#0BA4@-4p=`!&I>2A$r(B $B3NG'$9$k:]$K$O!"$3$l$i$N5!4X$N?.Mj@-$r4*0F$7$=$NI>2A$rMxMQ$9$k$3$H$H$J$k!#(B $BNc!K%;%-%e%j%F%#4F::5!4X#X#Y#Z$K$h$kI>2A!"?t%v7n4V$N%b%K%?%j%s%07k2L$K$*(B $B$1$kI>2A$,#A#A#A$NAH?%$H$O<+M3$KDL?.$r5v2D$9$k!"$J$I!#(B $B""!!8!1V3NG'$N>l=j(B $B!!8!1V3NG'$K$O!"0J2<$N>u67$,9M$($i$l$k!#(B $B!&C$NAH?%4V$NDL?.$,9T$o$l$k;~!#(B $B""!!8!1V=hM};~$NF0:n(B $B!!8!1V3NG'$N7k2L$K1~$8$F!"0J2<$N$h$&$JF0:n$r9T$&!#(B $B!&8!::9g3J(B $B!!:GDc8B$N8!::$r=|$-!"$9$Y$F$NDL?.$r<+M3$K9T$($k!#$?$@$7DL?.Aje$N5!4o$K$F>\:Y8!::$,I,MW$H$J$k!#(B $B!&>\:Y8!::(B $B!!4m81@-$N$"$kCl9g$K$O!"4IM}$C(B $B$F%Q%1%C%H8!::$J$I$h$j>\:Y$J%A%'%C%/$r9T$&!#(B $B!&3VN%=hM}(B $B!!%0%m!<%P%k%"%I%l%9%W%l%U%#%C%/%9$rDLCN$7$J$$!"B>$N%;%0%a%s%H$X$NDL?.$r(B $B$9$Y$Fe$+$i3VN%$r(B $B9T$&!#!J(BIPv6$B$N>l9g!"%j%s%/%m!<%+%k%"%I%l%9$+$i$NDL?.@h$r@)8B$9$k$J$I!K(B $B!!7k2LE*$K!"%;%-%e%j%F%#BP:v$r9T$C$F$$$J$$C.8B(B $B$N%*!<%P!<%X%C%I$N$_$Ge(B $B0BA4$HI>2A$9$k$N$+!"0BA4$G$"$k$HG'<1$7$?>l9g!"$I$3$^$G$N@\B3@-$J$I$r5v2D(B $B$9$k$N$+$H$$$C$?4p=`$r<($9$3$H$OFq$7$/!"%;%-%e%j%F%#%]%j%7!<:n@.>e$N2]Bj(B $B$H$b$J$k!#0BA4@-$N8!>Z!&I>2A$N$R$H$D$N;X?K$H$7$F%;%-%e%j%F%#4F::5!4X$K$h(B $B$k%l%]!<%H$*$h$SI>2A4p=`$NL@3N2=!"3JIU$1$J$I$N?tCM2=$J$I%]%j%7!<:n@.$KI,(B $BMW$JJd=uE*$JH=CG:`NA$Nl9g!"%;(B $B%-%e%j%F%#%]%j%7!<:vDj$K4X$9$k@lLgCN<1$rA0Ds$K$9$k$3$H$OFq$7$$$?$a!"%5!<(B $B%S%9$N0lIt$H$7$F#I#S#P$J$I$N%$%s%?!<%M%C%H@\B3%5!<%S%96HZ$7$?>l9g$K$*$$$F$b!"%H%i%U%#%C%/$N(B $BF0E*%b%K%?%j%s%0$J$I$N7k2L$K1~$8$F!"3NG'$r9T$&$3$H$b8!F$$9$k!#(B $B!JFCDj%H%i%U%#%C%/$N0[>oA}2C$J$I!K(B $B""!!6[5^7YJs$K$h$k%;%-%e%j%F%#%l%Y%k(B(DefCon)$B%3%s%H%m!<%k(B $B!!CZ$G$O!"L$CN$N4m81@-$K$D$$$F$O#1#0#0!s8!CN!"(B $BH=CG$9$k$3$H$O8=l9g$K$h$C$F$OCo;~$N$[$+$K!"(BNetwork Worm$B$NH/@8$J$I6[5^;~$K$*$1$k%]%j(B $B%7!<$N5,Dj!"$*$h$S<+8JAH?%!&CZ5!4X$+$iH/$;$i$l$k$b$N$K4p$E$$$F7hDj(B $B$5$l$k%M%C%H%o!<%/A4BN$N0BA4@->uBV$r<($9$b$N!#(B $B!&AH?%Fb$N%;%-%e%j%F%#%]%j%7!<$K$h$C$F5,Dj$5$l!"AH?%$N%;%0%a%s%HFb$N%]%j(B $B%7!<0cH?N($d!"%o!<%`$J$I$NH/8+?t!"%H%i%U%#%C%/0J>e!"30It$+$i$N967b$N8!CN(B $B$J$I$K$h$C$FAH?%KI1RE*$K7hDj$5$l$k$b$N!#(B $B!&3FAH?%$K$F8!=P$7$?%;%-%e%j%F%#7Y9p>pJs$N6&M-$K$h$k!"Aj8_J,;66(D4E*$J%M(B $B%C%H%o!<%/>uBV$NH=CG$K4p$E$$$?<+N)E*$J%;%-%e%j%F%#%l%Y%k!#(B 4. $BE:IU;qNA(B $B""!!B>$NN`;w%b%G%k(B $B!!%M%C%H%o!<%/!"%;%-%e%j%F%#%Y%s%@3Fe$NLdBj$r2r7h$9$kZ!"EpD0$d2~$6$sKI;_!"%&%#%k%9!&%o!<%`BP:v6n=|!"(BDoS$B967b$J$I(B $B%;%-%e%j%F%#J,Ln$N35MW$HNN0h$r@bL@!#(B $B!&(BIPv6$B$G9M$($i$l$k%;%-%e%j%F%#LdBj$K$D$$$F$N%V%l%$%s%9%H!<%_%s%0(B o $B%M%C%H%o!<%/$NM}A[$+$i=PH/$7$h$&(B $B8=2A$NOC$bF~$l$?$$(B - $B7hDj$7$?$3$H(B (1) WG$B2=(B (2) v6$B$NM}A[E*$J%M%C%H%o!<%/$K:,$6$7$?%;%-%e%j%F%#%b%G%k:n$j(B (3) white paper$B:n@.(B $B!~(B10$B7n(B7$BF|(B #1 - $Be$N0BA4@-$G$O$J$/!"(B controlled $B$J%M%C%H%o!<%/>e$G$N0BA4@-$,M_$7$$(B $B!&4{B8$N%;%-%e%j%F%#%b%G%k$,D>LL$7$F$$$kLdBj!J%f!<%6!<$N8+CO$+$i$N5DO@!K(B o $B%N!<%I4V$NDL?.4IM}!J@)8B$9$k!"$G$O$J$/DL$9J}8~$G!K(B o $B@)8B$J$/DL?.$,$G$-$k$h$&$K$7$?$$!#(B $B!&%;%-%e%"$J%M%C%H%o!<%/$r9=@.$9$kMWAG!&(Bplayer o $B%]%j%7!<$r7h$a!"@k8@$9$k?M(B($B%f!<%6!K(B o $B$NDL?.%5!<%S%9$r%"%J%m%8!<$H$7$F%;%-%e%j%F%#LL(B $B$K$D$$$F%G%#%9%+%C%7%g%s(B o end-to-end$BDL?.$G$"$k(B o $B%"%/%;%9%3%s%H%m!<%k$O$"$^$j;H$o$l$F$J$$(B o $B0-$$;v$r$7$??M$rFCDj$G$-$k(B $B0-$$;v$rFCDj$G$-$k$HLBOG$J;v$O8:$k(B v4$B@$3&$N$h$&$J4m81$N2DG=@-$@$1$G(Bfilter out$B$5$l$k$N$O2?$H$+$7$?$$(B $B!&B>$NNc(B o $B9q:]2_J*$N%;%-%e%j%F%#%A%'%C%/(B o NDA$B$N$"$k2q5D$G$N7HBS;#1F$N@)8B(B o $B%U%j!<%M%C%H%o!<%/$H8x6&%M%C%H%o!<%/(B - $B7hDj$7$?$3$H!&5DO@$GF@$i$l$?FbMF(B o $B%;%-%e%j%F%#%b%G%k$NJ}8~@-(B $B!!!!!V0BA4$J%M%C%H%o!<%/>e$G$N?.Mj$G$-$k%N!<%I$K$O@)8B$N$J$$<+M3$JDL?.$r5v2D$G$-$k;EAH$_!W(B $B!~(B10$B7n(B30$BF|(B #2 - $Bo$K$h$$7r9/>uBV$GMxMQ$G$-$k$h$&$K$9$k(B o $BK=$l$??M$O@):[$r$&$1$k;EAH$_$b$$$k$+$b(B o $BF0E*$J4IM}$,I,MW(B o linklocal$B$OZ$r?.MQ$9$k$+(B $B?.MQ$7$F!"?.Mj$G$-$k%;%0%a%s%H$X!#$=$l0J30$O%;%-%e%j%F%#8!::!&%U%#%k%?%j%s%0(B $B%k!<%k$N87$7$$%;%0%a%s%H$X(B $B%;%0%a%s%H$N0B?4>u67$N;XI8$K$J$k$+(B $B!&0[$J$k8!1V5!9=$N$9$j9g$o$;(B $B!&0BA44p=`$H%5%$%HI>2A!"3JIU$15!4X(B $B!~(B11$B7n(B28$BF|(B #3 - $BZ$7$F@\B3$5$;$k(B o $B$D$J$,$C$?$"$H$O!"0B?4$7$F3Fl=j!I$H$7$F9M$($k(B $B6-3&$rJ,$1!"(Bswitch/filter$B$9$k$?$a$N%W%m%U%!%$%kDs6!!"8!::$rZ$9$k$3$H$r?d>)$H$$$&A0Ds$H$7!"(BVALN$B%0%k!<%W$r:n$k;~$K(B $B%;%-%e%j%F%#%]%j%7!<$r8!::$9$k;EAH$_$rF~$l$k$J$I$G$-$k$N$G$O$J$$$+!)(B o $BG'>Z>pJs$H$7$F2?$r$_$k$+(B ID/passwd$B$N$[$+$K(BOS$B$,2?$G!"%"%W%j%1!<%7%g%s$O2?$rF~$l$F$$$k$+(B $B$J$I%N!<%I$K4X$9$kMM!9$J>pJs$N)$@$1(B $B$G$O$J$/!"G'>ZJ}K!!"CpJs$bZ$H%"%/%;%9J}K!$@$1$G$O$J$/!"CZ$r%H%j%,!<$K%]%j%7!<8!::$9$k$3$H$H!"DL2a$9$k%H%i%U%#%C%/$N(B $B8!::$rJ,$1$k(B o $BN3EY$r$I$&@_Dj$9$k$+!"%l%$%dKh$K$G$-$k$3$H$NDj5A$,$$$k(B o $B%H%i%U%#%C%/$NN.$l$dIi2Y$O%7%s%W%k$K$9$k$3$H$H$N%P%i%s%9$bZ$,Av$j!"(Bv6$B$N$d$jl9g(B ISP$BB&$K%]%j%7!<(BDB$B$,$"$j!"%5!<%S%9$H$7$F%;%-%e%j%F%#%l%Y%k$K1~$8$?$b$N(B $B$,MQ0U$5$l$F$$$F%3%s%7%e!<%^%f!<%6$O$=$l$rA*$s$G%M%C%H%o!<%/$rMxMQ(B $BMxMQu67$K1~$8$F!"DL?.$N@)8B!&<+M3EY$,0[$J$k(B $B%;%-%e%j%F%#BP:v$rBU$C$F$$$kCl9g$N<+F0BP=h$r@9$j9~$`$H!"(B $B>c32H/@8!&%;%-%e%j%F%#LdBjH/8+$+$i$NBP1~=hM}$,HQ;($J$k$3$H$,7|G0$5$l$k!#(B o CERT$B>pJs$G>pJsDs<($@$1$G$O$J$/!"%*!<%H%"%C%W%G!<%H$b9MN8$7!"$=$l$i$N>pJs(B $B$r%W%m%0%i%`$J$I$GD>@\MxMQ$G$-$k$h$&$K$J$i$J$$$+!)(B o $BNY$N%M%C%H%o!<%/%;%0%a%s%H$O?.MQ$G$-$k$+(B? $B?.MQ>pJs$rD>@\pJs(BDB$B;2>H%Q%?!<%s$J$I$K(B $BJ,N`2DG=(B $B!&%;%-%e%j%F%#%]%j%7!<4V6-3&$HCl9g!"$=$NJL%M%C%H(B $B%o!<%/$N%;%-%e%j%F%#%]%j%7!<$r8!::$9$k;EAH$_(B o $BC)!"(Btraceback$B$H$NAH$_9g(B $B$o$;$b8!F$$9$k(B o $B$$$/$D$+$N%M%C%H%o!<%/$r7PM3$7$FAjl9g$N7PM3$9$k(B $B%M%C%H%o!<%/$N%;%-%e%j%F%#%A%'%C%/$r9T$&;EAH$_(B o $B%M%C%H%o!<%/%]%j%7!<$NF~$l;R$O$"$k$,!"%;%-%e%j%F%#%]%j%7!<$N(B $BF~$l;R$O$J$$$+8!F$$,I,MW(B $B!&%(%s%I%f!<%6!2A$9$k;XI8$r9M$($F$_$k!#(B o $B%f!<%6!<$K%;%-%e%j%F%#BP:v$r9T$$<+?H$NCe$2$k(B $B%b%A%Y!<%7%g%s$H$J$k$h$&$K%b%G%kDs<($7$F$$$/(B o 'fear' $B$K$h$k%;%-%e%j%F%#BP:v$G$O$J$/(B'benefit'$B$rF@$i$l$k$3$H(B - $B7hDj$7$?$3$H(B $B!&(BIETF59$B$K;}$A9~$`(B $B!&(BInternet-Draft$B<9I.!J8!1V%b%G%k$K$D$$$F!K(B 3. $B:#8e$N2]Bj(B $B!!(B2004$BG/$K$O!"$5$i$K5DO@$r$9$9$a!"$^$H$a$?$b$N$rH/9T$9$kM=Dj$G$"$k!#(B $B$3$N3hF0$r!"(BIETF$B$d$=$NB>(BWIDE$BFb30$K$b9-$2!"%;%-%e%j%F%#;X?K$H$7$F3hMQ(B $B$5$l$k$h$&$JF/$-$+$1$b8!F$$7$F$$$/!#(B $B!!6qBNE*$J3hF0L\I8$H$7$F!"0J2<$K(B4$BE@$"$2$k!#(B $B!!(B(1)$BJ8=q2=(B white paper$B$H$b8F$s$G$$$k$b$N$r!"ZCDBN$H$N%3%i%\%l!<%7%g%s(B $B8!1V%b%G%k$N$N%;%-%e%j%F%#4XO"CDBN!"(BWG$B$J$I$H$NO"7H$rLO(B $B:w$9$k!#(B $B0J>e(B Copyright Notice Copyright (C) WIDE Project (2004). All Rights Reserved.