Internet Protocol Secirity
Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesis
This paper gives an overview of the architecture and design of IPSec. IPSec is a network-layer security protocol for the IP protocol suite. The basic issues in authentication- and encryption techniques are presented as background material.
We have installed and tested a freely available implementation of IPSec. Performance measurements were made using the tools Netperf-2.1 and DBS-1.1.4.
We used high-performance personal computers and a high-speed network so that the results were determined only by the IPSec implementation. The performance loss was larger for the encryption algorithms than for the authentication algorithms.
When using only authentication, the throughput was 37% of that without algorithm. With only encryption, the throughput was 15% and 7% for DES-MD5 and 3DES-MD5, respectively. When using both authentication and encryption on each packet, the throughput decreased to approximately 7,4% of that without algorithm.
Place, publisher, year, edition, pages
1997. , 42 p.
IdentifiersURN: urn:nbn:se:kth:diva-99152OAI: oai:DiVA.org:kth-99152DiVA: diva2:541148
Maguire Jr., Gerald Q., Professor