Search RFCs
RFC 6528
Defending against Sequence Number Attacks,February 2012
- File formats:
- Status:
- PROPOSED STANDARD
- Obsoletes:
- RFC 1948
- Obsoleted by:
- RFC 9293
- Updates:
- RFC 793
- Authors:
- F. Gont
S. Bellovin - Stream:
- IETF
- Source:
- tcpm (wit)
Cite this RFC:TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC6528
Discuss this RFC: Send questions or comments to the mailing listtcpm@ietf.org
Other actions:Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 6528
Abstract
This document specifies an algorithm for the generation of TCPInitial Sequence Numbers (ISNs), such that the chances of an off-pathattacker guessing the sequence numbers in use by a target connectionare reduced. This document revises (and formally obsoletes) RFC1948, and takes the ISN generation algorithm originally proposed inthat document to Standards Track, formally updating RFC 793. [STANDARDS-TRACK]
For the definition ofStatus,seeRFC 2026.
For the definition ofStream, seeRFC 8729.