This document describes a cryptographic authentication mechanism for Babel routing protocol, updating, but not superseding RFC 6126. The mechanism allocates two new TLV types for the authentication data, uses HMAC and is both optional and backward compatible.