Sign in
Version 5.13.0, 2015-03-25
Report a bug

HIP Middlebox Puzzle Offloading and End-host Notification

Document type: Expired Internet-Draft (individual)
Document stream: No stream defined
Last updated: 2013-07-13 (latest revision 2013-01-09)
Intended RFC status: Unknown
Other versions: (expired, archived): plain text, pdf, html

Stream State:No stream defined
Document shepherd: No shepherd assigned

IESG State: Expired
Responsible AD: (None)
Send notices to: No addresses provided

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found here:


The Host Identity Protocol [RFC5201] is a secure signaling protocol with a cryptographic namespace. It provides the communicating peers with a cryptographic puzzle mechanism to protect against Denial of Service (DoS) attacks exploiting the computation and memory overheads of the protocol exchange. This document specifies an extension of the protocol that enables an on-path network entity to assist in the choice of the puzzle difficulty in case of an attack. Furthermore, it defines a modification of the puzzle mechanism that enables a host to delegate puzzle solving to an on-path network entity.


Rene Hummen <>
Martin Henze <>
Jens Hiller <>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)