CLL: A Cryptographic Link Layer for Local Area Networks

摘要: Ethernet and IP form the basis of vast majority LAN installations. But these protocols do not provide comprehensive security mechanisms, thus give way for a plethora attack scenarios. In this paper, we introduce layer 2/3 extension LANs, Cryptographic Link Layer (CLL). CLL provides authentication confidentiality to hosts in by safeguarding all 2 traffic including ARP DHCP handshakes. It is transparent existing protocol implementations, especially module clients servers. Beyond fending off external attackers, also protects from malicious behavior authenticated clients. We discuss protocol, motivate underlying design decisions, finally present implementations both Windows Linux. Their performance demonstrated through real-world measurement results.