FABRID design document

Created the Design Document for the SCIONLab FABRID implementation.
netsec-ethz · Jul 9, 2024 · 304a9e3 · 304a9e3
1 parent 5b89505
commit 304a9e3
Show file tree

Hide file tree

Showing 7 changed files with 679 additions and 0 deletions.
diff --git a/doc/cryptography/drkey.rst b/doc/cryptography/drkey.rst
@@ -17,6 +17,7 @@ DRKey is used for the following systems:
 - SCION Packet Authenticator Option (SPAO)
 - COLIBRI
 - EPIC
+- FABRID
 
 In the DRKey system, the key establishment is offloaded to the Control Service
 (CS).
@@ -486,4 +487,5 @@ Decimal Identifier Description
 ======= ========== ============================================================== =============
 0       Generic    Identifier for Level 1 key in :ref:`drkey-generic-derivation`  :ref:`drkey-generic-derivation`
 1       SCMP       Authentication of SCMP messages                                :ref:`scmp-specification`
+2       FABRID     FABRID authentication and path validation                      :doc:`/dev/design/FABRID`
 ======= ========== ============================================================== =============
diff --git a/doc/dev/design/FABRID.rst b/doc/dev/design/FABRID.rst
diff --git a/doc/dev/design/fig/FABRID/FABRIDActivation.png b/doc/dev/design/fig/FABRID/FABRIDActivation.png
diff --git a/doc/dev/design/fig/FABRID/NetworkTopology.png b/doc/dev/design/fig/FABRID/NetworkTopology.png
diff --git a/doc/dev/design/fig/FABRID/Overview.png b/doc/dev/design/fig/FABRID/Overview.png
diff --git a/doc/dev/design/index.rst b/doc/dev/design/index.rst
@@ -43,6 +43,7 @@ Active
    router-perf-model
    router-port-dispatch
    scmp-authentication
+   FABRID
 
 .. _design-docs-completed:
 

diff --git a/doc/protocols/extension-header.rst b/doc/protocols/extension-header.rst
@@ -53,6 +53,8 @@ Decimal Option
 ======= =================================
 0       :ref:`Pad1 Option <pad-1-option>`
 1       :ref:`PadN Option <pad-n-option>`
+3       :ref:`Identifier Option <identifier-option>`
+4       :ref:`FABRID Option <fabrid-option>`
 253     use for experimentation and testing
 254     use for experimentation and testing
 255     reserved