Authentication Header (AH)

• Provides cryptographic authentication (not encryption) of layers above IP plus selected fields in IP header (the ones that don’t change)

• Doesn’t actually specify the algorithm

  • one (keyed MD5) is mandatory to implement for interoperability
  • others may be used between consenting parties

shared secret

packet data

hash function

authentication value

Previous slide

Next slide

Back to first slide

View graphic version