UNIT-5

Pretty Good Privacy(PGP)

● PGP stands for Pretty Good Privacy (PGP) which is

invented by Phil Zimmermann.
● PGP was designed to provide all four aspects of security,
i.e., privacy, integrity, authentication, and non-repudiation
in the sending of email.
● PGP uses a digital signature (a combination of hashing
and public key encryption) to provide integrity,
authentication, and non-repudiation. PGP uses a
combination of secret key encryption and public key
encryption to provide privacy. Therefore, we can say that
the digital signature uses one hash function, one secret
key, and two private-public key pairs.
● PGP is an open source and freely available software
package for email security.
● PGP provides authentication through the use of Digital
Signature.
● It provides confidentiality through the use of symmetric
block encryption.
● It provides compression by using the ZIP algorithm, and
EMAIL compatibility using the radix-64 encoding scheme.
Following are the steps taken by PGP to create secure e-mail
at the sender site:
● The e-mail message is hashed by using a hashing
function to create a digest.
● The digest is then encrypted to form a signed digest by
using the sender's private key, and then signed digest is
added to the original email message.
● The original message and signed digest are encrypted by
using a one-time secret key created by the sender.
 ● The secret key is encrypted by using a receiver's public
key.
● Both the encrypted secret key and the encrypted
combination of message and digest are sent together.
PGP at the Sender site (A)

Following are the steps taken to show how PGP uses hashing
and a combination of three keys to generate the original
message:
● The receiver receives the combination of encrypted secret
key and message digest is received.
● The encrypted secret key is decrypted by using the
receiver's private key to get the one-time secret key.
● The secret key is then used to decrypt the combination of
message and digest.
● The digest is decrypted by using the sender's public key,
and the original message is hashed by using a hash
function to create a digest.
● Both the digests are compared if both of them are equal
means that all the aspects of security are preserved.
PGP at the Receiver site (B)
 IPSec Architecture
IPSec (IP Security) architecture uses two protocols to secure the traffic or
data flow. These protocols are ESP (Encapsulation Security Payload) and
AH (Authentication Header). IPSec Architecture includes protocols,
algorithms, DOI, and Key Management. All these components are very
important in order to provide the three main services:

● Confidentiality
● Authentication
● Integrity

IP Security Architecture
1. Architecture: Architecture or IP Security Architecture
covers the general concepts, definitions, protocols,

algorithms, and security requirements of IP Security

technology.

2. ESP Protocol: ESP(Encapsulation Security Payload)

provides a confidentiality service. Encapsulation Security
Payload is implemented in either two ways:

● ESP with optional Authentication.

● ESP with Authentication.

Packet Format:
● Security Parameter Index(SPI): This parameter is
used by Security Association. It is used to give a
unique number to the connection built between the
Client and Server.
● Sequence Number: Unique Sequence numbers are
allotted to every packet so that on the receiver side
packets can be arranged properly.
● Payload Data: Payload data means the actual data or
the actual message. The Payload data is in an
encrypted format to achieve confidentiality.
● Padding: Extra bits of space are added to the original
message in order to ensure confidentiality. Padding
length is the size of the added bits of space in the
original message.
● Next Header: Next header means the next payload or
next actual data.
● Authentication Data This field is optional in ESP
protocol packet format.
 3. Encryption algorithm: The encryption algorithm is the
document that describes various encryption algorithms used
for Encapsulation Security Payload.

4. AH Protocol: AH (Authentication Header) Protocol

provides both Authentication and Integrity service.
Authentication Header is implemented in one way only:
Authentication along with Integrity.

Authentication Header covers the packet format and general

issues related to the use of AH for packet authentication
and integrity.

5. Authentication Algorithm: The authentication Algorithm

contains the set of documents that describe the
authentication algorithm used for AH and for the
authentication option of ESP.

6. DOI (Domain of Interpretation): DOI is the identifier that

supports both AH and ESP protocols. It contains values
needed for documentation related to each other.

7. Key Management: Key Management contains the

document that describes how the keys are exchanged
between sender and receiver.

Authentication Header (AH)

Authentication Header (AH) is used to provide integrity and authentication to IP
datagrams. Replay protection is also possible. The services are connectionless,
that means they work on a per-packet basis.
Modes of operations in Authentication Header:
There are two modes in the authentication header

1. Authentication Header Transport Mode: In the authentication

header transport mode, it is lies between the original IP Header and

IP Packets original TCP header.
2. Authentication Header Tunnel Mode: In this authentication header

tunnel mode, the original IP packet is authenticated entire and the

authentication header is inserted between the original IP header and
new outer IP header. Here, the inner IP header contains the ultimate
source IP address and destination IP address. whereas the outer IP
header contains different IP address that is IP address of the firewalls
or other security gateways.

There are two main advantages that Authentication Header provides,

● Message Integrity – It means, message is not modified while coming
from the source.
● Source Authentication – It means, the source is exactly the source
from whom we were expecting data.

When packet is sent from source A to Destination B, it consists of data that we

need to send and header which consist of information regarding packet.
Authentication Header verifies origin of data and also payload to confirm if
there has been modification done in between, during transmission between
source and destination. However, in transit, values of some IP header fields
might change (like- Hop count, options, extension headers). So, values of such
fields cannot be protected from Authentication header. Authentication header
cannot protect every field of IP header. It provides protection to fields which are

essential to be protected.
1. Next Header – Next Header is 8-bit field that identifies type of header

present after Authentication Header. In case of TCP, UDP or

destination header or some other extension header it will store
correspondence IP protocol number . Like, number 4 in this field will
indicate IPv4, number 41 will indicate IPv6 and number 6 will
indicate TCP.
2. Payload Length – Payload length is length of Authentication header

and here we use scaling factor of 4. Whatever be size of header, divide

it by 4 and then subtract by 2. We are subtracting by 2 because we’re
not counting first 8 bytes of Authentication header, which is first two
row of picture given above. It means we are not including Next
Header, Payload length, Reserved and Security Parameter index in
calculating payload length. Like, say if payload length is given to be
X. Then (X+2)*4 will be original Authentication header length.
3. Reserved – This is 16-bit field which is set to “zero” by sender as this

field is reserved for future use.

4. Security Parameter Index (SPI) – It is arbitrary 32-bit field. It is

very important field which identifies all packets which belongs to

present connection. If we’re sending data from Source A to
Destination B. Both A and B will already know algorithm and key
 they are going to use. So for Authentication, hashing function and key
will be required which only source and destination will know about.
Secret key between A and B is exchanged by method of Diffie
Hellman algorithm. So Hashing algorithm and secret key for Security
parameter index of connection will be fixed. Before data transfer starts
security association needs to be established. In Security Association,
both parties needs to communicate prior to data exchange. Security
association tells what is security parameter index, hashing algorithm
and secret key that are being used.
5. Sequence Number – This unsigned 32-bit field contains counter

value that increases by one for each packet sent. Every packet will

need sequence number. It will start from 0 and will go till – 1 and
there will be no wrap around. Say, if all sequence numbers are over
and none of it is left but we cannot wrap around as it is not allowed.
So, we will end connection and re-establish connection again to
resume transfer of remaining data from sequence number 0. Basically
sequence numbers are used to stop replay attack. In Replay attack, if
same message is sent twice or more, receiver won’t be able to know if
both messages are sent from a single source or not. Say, I am
requesting 100$ from receiver and Intruder in between asked for
another 100$. Receiver won’t be able to know that there is intruder in
between.
6. Authentication Data (Integrity Check Value) – Authentication data

is variable length field that contains Integrity Check Value (ICV) for
packet. Using hashing algorithm and secret key, sender will create
message digest which will be sent to receiver. Receiver on other hand
will use same hashing algorithm and secret key. If both message digest
 matches then receiver will accept data. Otherwise, receiver will
discard it by saying that message has been modified in between. So
basically, authentication data is used to verify integrity of
transmission. Also length of Authentication data depends upon
hashing algorithm you choose.

Encapsulating Security Payload(ESP)

Encapsulating security payload, also abbreviated as ESP plays a very
important role in network security. ESP or Encapsulating security
payload is an individual protocol in IPSec. ESP is responsible for the CIA
triad of security (Confidentiality, Integrity, Availability), which is
considered significant only when encryption is carried along with them.
Securing all payload/ packets/ content in IPv4 and IPv6 is the
responsibility of ESP.

As the name suggests, it involves encapsulation of the content/ payload

encrypts it to suitable form and then there a security check or
authentication takes place for payload in IP Network. Encryption/
encapsulation and security/ authentication make the payload extremely
secure and safe from any kind of harm or threat to content/ data/
payload being stolen by any third party. The encryption process is
performed by authenticated user, similarly, the decryption process is
carried out only when the receiver is verified, thus making the entire
process very smooth and secure. The entire encryption that is performed
by ESP is carried on the principle of the integrity of payload and not on
the typical IP header.

Working of ESP:
1. Encapsulating Security Payload supports both main Network
layer protocols: IPv4 and IPv6 protocols.
2. It performs the functioning of encryption in headers of Internet
Protocol or in general say, it resides and performs functions in IP
Header.
 3. One important thing to note here is that the insertion of ESP is
between Internet Protocol and other protocols such as UDP/
TCP/ ICMP.

Modes in ESP:
Encapsulating Security Payload supports two modes, i.e. Transport
mode, and tunnel mode.

Tunnel mode:

1. Mandatory in Gateway, tunnel mode holds utmost importance.

2. Here, a new IP Header is created which is used as the outer IP
Header followed by ESP.

Transport mode:

1. Here, IP Header is not protected via encryption or authentication,

making it vulnerable to threats
2. Less processing is seen in this mode, so the inclusion of ESP is
preferred

Advantages:
Below listed are the advantages of Encapsulating Security Payload:

1. Encrypting data to provide security

2. Maintaining a secure gateway for data/ message transmission
3. Properly authenticating the origin of data
4. Providing needed data integrity
5. Maintaining data confidentiality
6. Helping with antireplay service using authentication header

Disadvantages:
Below listed are the disadvantages of Encapsulating Security Payload:

1. There is a restriction on the encryption method to be used

2. For global use and implementation, weaker encryptions are
mandatory to use

Components of ESP:
An important point to note is that authentication and security are not
provided for the entire IP packet in transport mode. On the other hand
for the tunnel mode, the entire IP packet along with the new packet
header is encapsulated.

ESP structure is composed of the following parts as shown below :

ESP Structure

The diagrammatic representation of ESP has the below-mentioned

components :

1. Security Parameter :

● Security parameters are assigned a size of 32 bits for use

 ● Security Parameter is mandatory to security parameter in ESP
for security links and associations

2. Sequence Number:

● The sequence number is 32 bits in size and works as an

incremental counter.
● The first packet has a sequence number 1 assigned to it
whenever sent through SA

3. Payload Data:

● Payload data don’t have fixed size and are variable in size to use
● It refers to the data/ content that is provided security by the
method of encryption

4. Padding:

● Padding has an assigned size of 0-255 bytes assigned to it.

● Padding is done to ensure that the payload data which needs to
be sent securely fits into the cipher block correctly, so for this
padding payloads come to the rescue.

5. Pad Length:

● Pad Length is assigned the size of 8 bits to use

● It is a measure of pad bytes that are preceding

6. Next Header:

● The next header is associated with a size of 8 bits to use

● It is responsible for determining the data type of payload by
studying the first header of the payload

7. Authentication Data:

● The size associated with authentication data is variable and

never fixed for use-case
● Authentication data is an optional field that is applicable only when
SA is selected. It serves the purpose of providing integrity.
 Internet Key Exchange (IKE)
Internet Key Exchange(IKE) is a key management protocol used to secure
communication and key exchange between two devices over any network. Key
exchange is done in two ways:

Manual Key Exchange

In Manual Key Exchange, the system administrator manually configures each

system with their keys. This method is suitable for small and static systems.

Automated Key Exchange

The keys will be created or generated based on the demand or requirement. This
method is suitable for large and distributed systems. Automated Key Exchange
has two main methods:
● Oakley Key Determination Protocol: Oakley key determination
protocol is based on the Diffie-Hellman key exchange protocol with
some added security. It is a generic protocol.
● ISAKMP(Internet Security Association and Key Management
Protocol): It provides a framework for key exchange and specific
support i.e the protocol can be either Authentication Header or
Encapsulation Security Protocol.
● SKEME Protocol: It is a key exchange technique that provides
anonymity, non-repudiation, and refreshment.

Phases of Internet Key Exchange(IKE)

IKE can be done in two phases:
IKE Phase-1
There will be two devices i.e. sender and receiver. Initially, the sender will
exchange the proposals for security services like encryption algorithms.
authentication algorithm, hash function, etc. The sender and receiver will form a
security association which is a collection of parameters that the two devices use.
Here, the ISAKMP session is established and called the ISAKMP tunnel or
Internet Key Exchange(IKE) Phase-1 tunnel which is bi-directional. When both
ends of the tunnel agree to accept a set of security parameters, Phase-1 is done.
Modes in Phase-1: In Phase-1, we have two modes:
● Main mode: The main mode of phase-1 uses six messages to secure
the key exchange and the Main mode is the more secure. It allows
hiding the end-point identifiers and the ability to select the crypto
algorithms. In the six messages: The first two messages negotiate the
policy and the next two messages depict the Diffie-hellman public
values necessary for key exchange and the next two messages are used
to authenticate the Diffie-hellman exchange.
● Aggressive mode: The Aggressive mode of phase-1 uses three
messages and it is less secure than the Main mode. It doesn’t allow
hiding the endpoints.

IKE Phase-2
There will be two devices i.e. sender and receiver. Once the sender and
receiver established the ISAKMP tunnel in phase-1 they move to phase-2.
phase-2 always operates in Quick mode. Here the security associations and
services between the two devices are negotiated. The devices will choose
which protocol(Authentication Header or Encapsulation Security Protocol)
and which algorithm to use.