RFC 9414: Unfortunate History of Transient Numeric Identifiers

In plain English — editorial summary, not part of the RFC

This document analyzes the timeline of the specification and implementation of different types of "transient numeric identifiers" used in IETF protocols and how the security and privacy properties of such protocols have been affected as a result of it. It provides empirical evidence that advice in this area is warranted. This document is a product of the Privacy Enhancements and Assessments Research Group (PEARG) in the IRTF.

Document record

Document ID

RFC9414

Published

July 2023

Authors

F. Gont; I. Arce

Status

INFORMATIONAL

Stream

IRTF

Area

—

Pages

27

Also known as

—

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC9414

Topics

• security
• vulnerability
• algorithm
• attack
• fingerprinting

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 9415On the Generation of Transient Numeric IdentifiersCurrent

  July 2023

• RFC 9416Security Considerations for Transient Numeric Identifiers Employed in Network ProtocolsCurrent

  July 2023

• RFC 7943A Method for Generating Semantically Opaque Interface Identifiers (IIDs) with the Dynamic Host Configuration Protocol for IPv6 (DHCPv6)Current

  September 2016

• RFC 7739Security Implications of Predictable Fragment Identification ValuesCurrent

  February 2016

• RFC 5961Improving TCP's Robustness to Blind In-Window AttacksUpdated

  August 2010

• RFC 9106Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work ApplicationsCurrent

  September 2021

• RFC 8937Randomness Improvements for Security ProtocolsCurrent

  October 2020

• RFC 8576Internet of Things (IoT) Security: State of the Art and ChallengesCurrent

  April 2019

Also filed under

• INFORMATIONAL
• 2023
• IRTF stream