A pivotal feature of IPv6 is its plug-and-play capability that enables hosts to integrate seamlessly into networks. In the absence of a trusted authority or security infrastructure, the challenge for hosts is generating their own address and verifying ownership of others. Cryptographically Generated Addresses (CGA) solves this problem by binding IPv6 addresses to hosts' public keys to prove address ownership. CGA generation involves solving a cryptographic puzzle similar to Bitcoin's Proof-of-Work (PoW) to deter address spoofing. Unfortunately, solving the puzzle often causes undesirable address generation delays, which has hindered the adoption of CGA. In this paper, we present Bitcoin-Certified Addresses (BCA), a new technique to bind IPv6 addresses to hosts' public keys. BCA reduces the computational cost of generating addresses by using the PoW computed by Bitcoin nodes to secure the binding. Compared to CGA, BCA provides better protection against spoofing attacks and improves the privacy of hosts. Due to the decentralized nature of the Bitcoin network, BCA avoids reliance on a trusted authority, similar to CGA. BCA shows how the PoW computed by Bitcoin nodes can be reused, which saves costs for hosts and makes Bitcoin mining more efficient.
翻译:IPv6的一个关键特性是其即插即用能力,使主机能够无缝集成到网络中。在没有可信机构或安全基础设施的情况下,主机面临的挑战是生成自身地址并验证其他主机的地址所有权。密码生成地址(CGA)通过将IPv6地址与主机的公钥绑定以证明地址所有权解决了这一问题。CGA生成涉及解决类似于比特币工作量证明(PoW)的密码学谜题,以阻止地址欺骗。然而,解谜过程常导致不可取的地址生成延迟,这阻碍了CGA的采纳。本文提出比特币认证地址(BCA),一种将IPv6地址绑定到主机公钥的新技术。BCA通过重用比特币节点计算的PoW来保障绑定安全,从而降低生成地址的计算成本。与CGA相比,BCA提供了更好的防欺骗攻击保护,并改善了主机的隐私性。由于比特币网络的去中心化特性,BCA与CGA类似,避免了对可信机构的依赖。BCA展示了如何重用比特币节点计算的PoW,从而为主机节省成本并使比特币挖矿更加高效。