A message source authentication scheme for inter-domain routing protocols

This paper proposes a message source authentication scheme for inter-domain routing protocols in which the initiator and the responder have no pre-established trust relationship. They use their cryptographically generated IPv6 addresses as source addresses for routing protocol, and sign routing protocol messages using their own private keys. Therefore, their IPv6 addresses are bound to their public-private key pair. After the initial message exchange, the initiator and the responder reach a shared key, and the routing protocol messages exchanged between them are authenticated using that shared key.