DNSCurve

DNSCurve is a proposed new secure protocol for the Domain Name System (DNS), designed by Daniel J. Bernstein. The basic idea is to define a secure new transport layer protocol to replace TCP, called CurveCP, using elliptic curve cryptography on top of UDP then doing DNS queries inside CurveCP. Because DNSCurve uses DNS CNAME records to prepend the CurveCP elliptic curve cryptography public keys to the DNS names of the DNS servers, Bernstein argues that the speed advantage of elliptic curve cryptography is fast enough and that DNSCurve could be implemented on the Internet much easier than DNSSEC.^[1][2]

DNSCurve appears to be more similar in concept to TSIG (securing communication with name servers) rather than DNSSEC (securing DNS records themselves). There are some significant differences between DNSCurve and TSIG, however. TSIG frequently needs to switch to the more expensive TCP transport, while DNSCurve is designed to keep the packets smaller. TSIG is also not typically used for all queries, but primarily for updating DNS records. TSIG does just authentication, while DNSCurve does both authentication and encryption. Finally, DNSCurve includes a scalable key distribution scheme, while TSIG is much more limited.

Notes

1. ^ Daniel J. Bernstein. "High-speed cryptography". http://marc.info/?l=djbdns&m=122011940521548&w=2. 
2. ^ Daniel J. Bernstein. "27C3 Talk by Dan Bernstein: High-speed high-security cryptography: encrypting and authenticating the whole Internet.". http://vimeo.com/18279777. 

External links

• Official website
• High-speed cryptography and DNSCurve, a June 2009 presentation by the author
• DNSCurve: Usable security for DNS, an August 2008 presentation by the author
• draft-dempsky-dnscurve-01 Propsed standard "DNSCurve: Link-Level Security for the Domain Name System", sent by M. Dempsky (from OpenDNS) to IETF (updated in February 2010)
• OpenDNS adopts DNSCurve, official OpenDNS blog entry
• dnscurv.es, a public test domain running DNSCurve-enabled authoritative servers
• CurveDNS, DNSCurve forwarding name server

This computer networking article is a stub. You can help Wikipedia by expanding it.v · Categories: Domain name system Cryptography stubs Computer network stubs Wikimedia Foundation. 2010. Игры ⚽ Поможем сделать НИР Curvature collineation Curve Music Look at other dictionaries: DNSCurve — im TCP/IP‑Protokollstapel: Anwendung DNSCurve Transport UDP TCP Internet IP (IPv4, IPv6) Netzzugang Ethe …   Deutsch Wikipedia Dnscurve — uses high speed high security elliptic curve cryptography to add link layer security on top of standard DNS, in a way that s simple to implement and administer and scales well. Not much is known about the protocol as of September 1st 2008, as it… …   Wikipedia Daniel J. Bernstein — Daniel Bernstein Born October 29, 1971 (1971 10 29) (age 40) East Patchogue, New York[ …   Wikipedia OpenDNS — Type DNS Resolution Service Founded 2005 Headquarters San Francisco, California Key people …   Wikipedia DNSSEC — im TCP/IP‑Protokollstapel: Anwendung DNSSEC Transport UDP TCP Internet IP (IPv4, IPv6) Netzzugang …   Deutsch Wikipedia DNS Security Extensions — DNSSEC im TCP/IP‑Protokollstapel: Anwendung DNSSEC Transport UDP TCP Internet IP (IPv4, IPv6) Netzzugang …   Deutsch Wikipedia Elliptische-Kurven-Kryptografie — Elliptische Kurve über R Unter Elliptic Curve Cryptosystems (ECC) versteht man asymmetrische Kryptosysteme, die Operationen auf elliptischen Kurven über endlichen Körpern verwenden. Die Sicherheit dieser Verfahren basiert auf der Schwierigkeit… …   Deutsch Wikipedia Elliptische-Kurven-Kryptographie — Elliptische Kurve über R Unter Elliptic Curve Cryptosystems (ECC) versteht man asymmetrische Kryptosysteme, die Operationen auf elliptischen Kurven über endlichen Körpern verwenden. Die Sicherheit dieser Verfahren basiert auf der Schwierigkeit… …   Deutsch Wikipedia Elliptische-Kurven-Kryptosystem — Elliptische Kurve über R Unter Elliptic Curve Cryptosystems (ECC) versteht man asymmetrische Kryptosysteme, die Operationen auf elliptischen Kurven über endlichen Körpern verwenden. Die Sicherheit dieser Verfahren basiert auf der Schwierigkeit… …   Deutsch Wikipedia Elliptic curve cryptography — (ECC) is an approach to public key cryptography based on the algebraic structure of elliptic curves over finite fields. The use of elliptic curves in cryptography was suggested independently by Neal Koblitz[1] and Victor S. Miller[2] in 1985.… …   Wikipedia 18+ © Academic, 2000-2024 Contact us: Technical Support, Advertising Dictionaries export, created on PHP, Joomla, Drupal, WordPress, MODx. Mark and share Search through all dictionaries Translate… Search Internet Share the article and excerpts Direct link … Do a right-click on the link above and select “Copy Link”