A Security Analysis on Kempf-Koodli's Security Scheme for Fast Mobile IPv6

Recently, the security scheme, proposed by Kempf and Koodli, has been adopted as a security standard for Fast handover for Mobile IPv6. But, it does not prevent denial of service attacks while resulting in high computation cost. More importantly, we find that it is still vulnerable to redirection attacks because it fails to secure the Unsolicited Neighbor Advertisement messages. In this paper, Kempf-Koodli’s scheme is formally analyzed through BAN-logic and its weaknesses are demonstrated. key words: Fast Mobile IPv6 security, SEND protocol, CGA, BAN-logic