E02-HP: Yes
Rationale
ENISA commissioned an external cryptographic protocol assessment by KU Leuven and the University of Bristol, published as Study on cryptographic protocols (November 2014). Section 3.3 assesses ESP packet protection, including CBC encryption, integrity ordering and HMAC-SHA2, rather than only the component ciphers. HIP RFC 7402 uses RFC 4303 ESP; its selected transform 8 combines AES-128-CBC with HMAC-SHA-256. This supplies published independent assessment of the selected data-protection mechanism, sufficient for the bounded critical-mechanism scope of E02.
Assessment method
Primary published external security assessment mapped to a retained critical mechanism; no execution
Source context
ENISA Study on cryptographic protocols (2014), authorship and section 3.3; RFC 7402 sections 3/5.1.2
Outstanding qualification
Credit the ESP assessment only, not HIPv2 base exchange, HIT binding, BEET address handling, rekey or RFC 8046 mobility. The report predates final RFC 7402 and does not prove their composition. It recommends CTR/AEAD for future deployment; Yes is evidence of review, not endorsement of the selected CBC suite. Its encryption-only and MAC-then-encrypt attack discussion is not a finding that authenticated transform 8 has those flaws. Contributors, external reviewers and ENISA commissioning are disclosed in the report; no separate conflict investigation, current-code audit, formal-tool replay or clean certification is claimed.
Public sources
- https://www.enisa.europa.eu/publications/study-on-cryptographic-protocols
- https://www.enisa.europa.eu/sites/default/files/publications/Study%20on%20cryptographic%20protocols.pdf
- https://www.rfc-editor.org/rfc/rfc7402.html
- https://www.rfc-editor.org/rfc/rfc4303.html
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round441-sources.json
- round441.html