Return to crypt-paper.pdf CVS log | Up to [local] / www / papers |
File: [local] / www / papers / crypt-paper.pdf (download)
Revision 1.1, Tue Sep 7 04:35:13 2004 UTC (19 years, 9 months ago) by marco
Add 2 more pdf's. |
%PDF-1.3 %туЯг 2 0 obj << /Length 17089 >> stream BT /T1 1 Tf 0.12 0 0 -0.12 182.64 685.26 Tm 0 g /GS1 gs 0 Tc 0 Tw (Cryptograph)Tj 625.0002 0 TD (y)Tj 97 0 TD -0.0002 Tc (in)Tj 131 0 TD -0.0001 Tc [(Op)-3000.3(enBSD )]TJ 559 0 TD -0.0002 Tc (An)Tj 184 0 TD (Ov)Tj 140 0 TD 0 Tc (erview)Tj /T2 1 Tf -2586.0002 241 TD (Theo)Tj 249.0001 0 TD 0.0001 Tc (de)Tj 130 0 TD 0 Tc (Raadt )Tj 322 0 TD [(Niklas)-31000(H)0(allqvist )-31000(Artur)]TJ 1014.0001 0 TD -0.0001 Tc [(Grab)-3000.1(o)]TJ 267 0 TD 0 Tc [(wski )-32000(Angelos)]TJ 613 0 TD [(D)-31999.8(Kerom)]TJ 419 0 TD [(ytis )-31999.8(N)-0.2(iels)-32000(Pro)]TJ 606 0 TD (v)Tj 47.9995 0 TD 0.0005 Tc (os)Tj /T3 1 Tf -2826.9995 116 TD 0 Tc (f)Tj /T2 1 Tf 50 0 TD (deraadt niklas art angelos pro)Tj 1254.0001 0 TD (v)Tj 47.9998 0 TD (os)Tj /T3 1 Tf 87 0 TD (g)Tj /T2 1 Tf 50 0 TD -0.0001 Tc [(op)-3000.3(en)]TJ 276 0 TD 0 Tc (bsdorg)Tj /T4 1 Tf -1202.9998 117 TD -0.0001 Tc (The)Tj 200 0 TD 0 Tc (Op)Tj 119.9998 0 TD 0.0001 Tc (enBSD)Tj 331 0 TD 0.0002 Tc (Pr)Tj 102 0 TD 0 Tc (oje)Tj 120.0002 0 TD (ct)Tj /T5 1 Tf -2348 325 TD (Abstract)Tj /T6 1 Tf 83 191 TD (Cryptographic)Tj 559 0 TD (mec)Tj 141 0 TD (hanisms)Tj 326 0 TD (are)Tj 146.0001 0 TD -0.0001 Tc (an)Tj 122.9999 0 TD 0 Tc [(imp)-2000.2(ortan)]TJ 333.0001 0 TD (t)Tj 66.9998 0 TD 0.0001 Tc (se )Tj -1777.9999 100 TD 0 Tc (curit)Tj 169.0001 0 TD (y)Tj 76.9999 0 TD [(comp)-1999.9(onen)]TJ 365 0 TD (t)Tj 66 0 TD 0.0001 Tc (of)Tj 101.0001 0 TD -0.0001 Tc (an)Tj 121 0 TD 0 Tc [(op)-2000(erating)]TJ 377.9999 0 TD (system)Tj 281.9999 0 TD 0.0002 Tc (in)Tj 103.0002 0 TD 0 Tc (secur )Tj -1662.0001 100 TD (ing)Tj 144.0001 0 TD -0.0001 Tc (the)Tj 148.9999 0 TD 0.0001 Tc (system)Tj 281 0 TD 0 Tc (itself)Tj 206 0 TD (and)Tj 166.9999 0 TD 0.0001 Tc (its)Tj 122.0001 0 TD 0 Tc (comm)Tj 214.9999 0 TD [(unication)-31999.8(paths)]TJ -1283.9999 99 TD (Indeed)Tj 321 0 TD 0.0001 Tc (in)Tj 120.0001 0 TD -0.0001 Tc (man)Tj 154.9999 0 TD 0 Tc (y)Tj 94 0 TD (situations)Tj 431 0 TD (cryptograph)Tj 441.0001 0 TD (y)Tj 90.9998 0 TD (is)Tj 107.0002 0 TD (the)Tj -1760.0001 100 TD [(only)-32000(to)-2000(ol)]TJ 360.0001 0 TD -0.0001 Tc (that)Tj 184.0001 0 TD 0 Tc [(can)-32000(solv)]TJ 296.9999 0 TD [(e)-31000(a)-32000(particular)-30000(problem)]TJ /T7 1 Tf 881.0001 0 TD (e g )Tj /T6 1 Tf -1722.0001 99 TD (net)Tj 113.0001 0 TD (w)Tj 57.9999 0 TD (ork lev)Tj 249.0001 0 TD -0.0001 Tc (el)Tj 96.9999 0 TD 0 Tc (securit)Tj 239.0001 0 TD (y)Tj 36.9999 0 TD ()Tj 95 0 TD (While)Tj 255.0001 0 TD (cryptograph)Tj 440.9998 0 TD (y)Tj 81 0 TD (b)Tj 44 0 TD (y)Tj 83.0002 0 TD (it )Tj -1792.0001 100 TD (self)Tj 152 0 TD 0.0001 Tc [(do)-1999.9(es)]TJ 193.0001 0 TD -0.0001 Tc (not)Tj 152.9999 0 TD 0 Tc (guaran)Tj 249.0001 0 TD [(tee)-31000(securit)]TJ 375.9999 0 TD (y)Tj 37 0 TD ()Tj 58.0001 0 TD (when)Tj 222 0 TD (applied)Tj 296 0 TD 0.0001 Tc (cor )Tj -1736.0001 99.9998 TD 0 Tc (rectly)Tj 199 0 TD ()Tj 60 0 TD 0.0001 Tc (it)Tj 91.0001 0 TD -0.0001 Tc (can)Tj 159.9999 0 TD 0 Tc (signican)Tj 336 0 TD (tly)Tj 134.0001 0 TD (impro)Tj 210.9999 0 TD (v)Tj 42 0 TD (e)Tj 71 0 TD (o)Tj 40 0 TD (v)Tj 42.0001 0 TD -0.0001 Tc (erall)Tj 190.9998 0 TD 0 Tc (securit)Tj 239.0002 0 TD (y)Tj 36.9998 0 TD ()Tj -1852.9999 99 TD [(Since)-22000(o)0.1(ne)-22000(of)-22000(the)-21999.9(m)-0.1(ain)-22000(f)0(o)-2000(c)0(i)-22000.1(o)0.1(f)-22000(the)-22000(Op)-2000.1(enBSD)-22000.2(s)0(ystem)-22000.2(is)]TJ 0 100 TD (securit)Tj 239 0 TD (y)Tj 37.0001 0 TD 27.9999 Tc (v)Tj 90 0 TD 0 Tc [(arious)-27000(cryptographic)-26000.1(mec)]TJ 915.9999 0 TD [(hanisms)-28000(a)-0.2(re)-27000(em )]TJ -1282 100 TD -0.0001 Tc (plo)Tj 109 0 TD 0 Tc (y)Tj 42.0001 0 TD [(ed)-26999.9(in)-27000.1(a)-27999.9(n)]TJ 319.9999 0 TD (um)Tj 113 0 TD [(b)-2000(e)-0.1(r)-26999.9(o)0(f)-28000(d)0(ieren)]TJ 508 0 TD [(t)-27000(roles)]TJ -1009 99 TD [(This)-26000(pap)-2000.1(e)0(r)-26000(g)0.1(iv)]TJ 527 0 TD 0.0001 Tc [(es)-23999.8(an)-25999.9(o)]TJ 248 0 TD 0 Tc (v)Tj 42.0001 0 TD [(erview)-23999.9(of)-26000(the)-27000.1(cryptograph)]TJ 933.9998 0 TD (y)Tj -1833.9999 100 TD (emplo)Tj 215 0 TD (y)Tj 42.0001 0 TD [(ed)-23000(in)-24000(Op)-2000.1(enBSD)-24000(W)]TJ 687.9999 0 TD [(e)-24000.1(d)0.1(iscuss)-23000(t)0(he)-24000(v)]TJ 512.9999 0 TD [(arious)-23000(com )]TJ -1457.9999 99.0002 TD 0.0001 Tc [(p)-2000(o)0.2(nen)]TJ 217.0001 0 TD 0 Tc [(ts)-24000(IPsec)-25000(SSL)-24999.9(l)-0.1(ibraries)-23000(stronger)-22999.9(passw)]TJ 1403.9998 0 TD 0.0001 Tc [(ord)-21999.9(e)0.1(n )]TJ -1620.9999 100 TD 0 Tc (cryption)Tj 358 0 TD [(Kerb)-2000.1(eros)-29999.9(IV)-32000(random)-30000(n)]TJ 857 0 TD 0.0001 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)0(r)-30999.9(g)-0.2(enerators)]TJ /T7 1 Tf -1328 100 TD (etc )Tj /T6 1 Tf 129.0001 0 TD -0.0001 Tc ()Tj 91 0 TD 0 Tc (their)Tj 203.9999 0 TD [(role)-32000(i)0.1(n)]TJ 270.0001 0 TD (system)Tj 281 0 TD (securit)Tj 238.9999 0 TD (y)Tj 37 0 TD ()Tj 56 0 TD (and)Tj 168.0001 0 TD (their)Tj 204 0 TD -0.0002 Tc (in)Tj 66.9998 0 TD 0.0001 Tc (ter )Tj -1745.9999 99 TD 0 Tc [(actions)-28000.1(w)0(ith)-29999.9(the)-29000(rest)-29000(of)-29000.1(the)-29999.9(s)-0.1(ystem)-28000.1(and)-30000(where)-29000(ap )]TJ 0 100 TD [(plicable)-27000(the)-28000(net)]TJ 583 0 TD (w)Tj 58 0 TD (ork)Tj /T1 1 Tf -641 307 TD ()Tj 168 0 TD 0.0001 Tc (In)Tj 101.0001 0 TD 0 Tc [(tro)-3000(duction)]TJ /T6 1 Tf -186.0001 191 TD 0.0001 Tc [(An)-29999.8(imp)-1999.8(o)0.2(rtan)]TJ 471 0 TD 0 Tc [(t)-30000(asp)-2000(ect)-30000.1(of)-29999.9(securit)]TJ 657.0001 0 TD [(y)-28999.8(i)-0.1(n)-30000(a)-30000.1(mo)-2000(dern)-30000.2(op )]TJ -1211.0001 100 TD [(erating)-24000(system)-25000(is)-24999.9(cryptographic)-22999.9(services)-24000.1(and)-25000(mec)]TJ 1760.0001 0 TD (ha )Tj -1760.0001 100 TD (nisms)Tj 271 0 TD [(While)-30000(n)0(ot)-29999.9(a)-29000(s)0(ecurit)]TJ 704.0001 0 TD [(y)-28999.9(p)0(anacea)-30000.1(cryptograph)]TJ 858.9998 0 TD (y)Tj -1833.9999 98.9998 TD [(is)-30999.9(sometimes)-31000(the)-32000(righ)]TJ 782 0 TD [(t)-30000(t)0(o)-2000(o)-0.1(l)-31999.9(i)0(n)-31000(solving)-30000(certain)-31000(p)0.2(rob )]TJ -782 100.0002 TD (lems)Tj 219.0001 0 TD [(In)-19000(particular)-20000(cryptograph)]TJ 936.0001 0 TD [(y)-15999.9(i)0(s)-19000(extremely)-19000(useful)]TJ -1155.0001 99.9999 TD [(in)-20000(solving)-18000.1(a)-20000(n)]TJ 466.0001 0 TD -0.0001 Tc (um)Tj 112.9999 0 TD 0 Tc [(b)-2000(e)0(r)-19000(o)0(f)-20000.1(s)0.1(ecurit)]TJ 463 0 TD [(y)-18000(issues)-19000(i)0(n)-20000(t)0(he)-20000(follo)]TJ 663.0001 0 TD -0.0001 Tc (wing)Tj -1705.0001 99 TD 0 Tc [(three)-26999.9(a)-0.1(reas)]TJ /T8 1 Tf 83 163 TD ( )Tj /T6 1 Tf 83.0001 0 TD (Net)Tj 129 0 TD (w)Tj 57.9999 0 TD [(ork)-26000(securit)]TJ 384.0001 0 TD (y)Tj 37 0 TD ()Tj /T8 1 Tf -691 157 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(Secure)-27000(storage)-25999.9(facilities)]TJ /T8 1 Tf -83.0001 158 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(Pseudo )-27000(Random)-27000(n)]TJ 756.9999 0 TD (um)Tj 113 0 TD [(b)-2000(e)0(r)-27000.1(g)0.1(enerators)]TJ -953 163 TD (Since)Tj 227.0001 0 TD (one)Tj 162.9999 0 TD (of)Tj 105.0001 0 TD -0.0001 Tc (our)Tj 158.9999 0 TD 0 Tc (goals)Tj 218.0001 0 TD -0.0001 Tc (in)Tj 107.9999 0 TD 0 Tc (the)Tj 153 0 TD [(Op)-2000(enBSD)]TJ 403.0001 0 TD [(pro)-4999.8(ject)]TJ -1619.0001 99 TD [(is)-23000(to)-24000(pro)]TJ 296 0 TD [(vide)-22000(strong)-22000(securit)]TJ 661 0 TD (y)Tj 37 0 TD 24 Tc (w)Tj 105.0001 0 TD 22.9999 Tc [(eh)22999.8(a)]TJ 145.9999 0 TD 0 Tc (v)Tj 42.0001 0 TD [(e)-21999.9(implemen)]TJ 407 0 TD [(ted)-23999.8(a)]TJ -1694.0001 100 TD (n)Tj 43.9999 0 TD 0.0001 Tc (um)Tj 113.0001 0 TD 0 Tc [(b)-1999.9(e)-0.1(r)-22000(o)0.1(f)-23000(p)0(roto)-2000(cols)-21000(and)-21999.9(services)-22000(i)-0.1(n)-22000(t)0(he)-23000.1(base)-22000.2(system)]TJ -157.0001 100 TD [(An)-30000.1(Op)-2000.1(enBSD)-29000(distribution)-30000(th)]TJ 1062.0001 0 TD [(us)-29000(has)-29000(full)-29999.9(supp)-1999.8(ort)-29000(f)0(or)]TJ -1062.0001 99.0001 TD 0.0001 Tc (suc)Tj 114.0001 0 TD 20.9999 Tc [(hm)21000(e)20999.8(c)]TJ 208 0 TD 0 Tc [(hanisms)-20000(as)-20000(IPsec)-21000(SSL)-22000(K)0.1(erb)-2000(eros)]TJ /T7 1 Tf 1204.9998 0 TD 0.0001 Tc (etc)Tj /T6 1 Tf 152.0002 0 TD 1.9998 Tc [(be)1999.8(i)1999.6(n)2000(g)]TJ -1679.0001 100 TD 0 Tc [(unaected)-28000.1(b)]TJ 443 0 TD [(y)-27000(exp)-2000(ort)-27000(restriction)-27000(la)]TJ 795 0 TD (ws)Tj -1155 100 TD [(Simply)-28000(supp)-2000(orting)-28000.1(these)-28000(mec)]TJ 1052 0 TD [(hanisms)-26999.8(ho)]TJ 428.0001 0 TD (w)Tj 57.9998 0 TD (ev)Tj 79.0002 0 TD -0.0001 Tc [(er)-26000.3(i)-0.1(s)]TJ -1700.0001 99.0001 TD 0 Tc [(not)-22000(s)0.1(ucien)]TJ 431 0 TD [(t)-22000(for)-21000.1(wide spread)-20000(u)0.1(se)]TJ 800.0001 0 TD (W)Tj 77.9998 0 TD [(e)-22000.2(a)0.1(re)-21000(constan)]TJ 468 0 TD (tly)Tj 248.0002 -4319 TD (trying)Tj 252.9998 0 TD 0.0002 Tc (to)Tj 107.0002 0 TD 0 Tc (mak)Tj 152.9998 0 TD 32 Tc [(et)32000(h)31999.8(e)32000(i)32000.2(r)]TJ 273.0002 0 TD -0.0001 Tc (use)Tj 150 0 TD 0 Tc [(as)-32000(easy)]TJ 296 0 TD (and)Tj 191 0 TD (where)Tj 246 0 TD [(p)-2000(ossi )]TJ -1669 100 TD (ble)Tj 162 0 TD (transparen)Tj 388 0 TD [(t)-30999.8(t)0(o)-32000(t)0(he)-32000(end)-31999.8(user)]TJ 698 0 TD (Th)Tj 103.9998 0 TD (us)Tj 135.0002 0 TD [(more)-32000(w)]TJ 271 0 TD (ork)Tj -1758 99 TD (is)Tj 95.9998 0 TD 0.0001 Tc (done)Tj 210.0002 0 TD 0 Tc (in)Tj 110 0 TD -0.0001 Tc (those)Tj 228.9998 0 TD 0 Tc (mec)Tj 141.0002 0 TD (hanisms)Tj 331 0 TD -0.0001 Tc (that)Tj 192 0 TD (can)Tj 165 0 TD 2 Tc (be)Tj 125 0 TD -0.0001 Tc (used)Tj 202 0 TD 0 Tc (to)Tj -1801 100 TD (pro)Tj 119 0 TD [(vide)-26000(transparen)]TJ 564 0 TD [(t)-26000(securit)]TJ 297 0 TD (y)Tj 37 0 TD ()Tj /T7 1 Tf 50 0 TD (e g )Tj /T6 1 Tf 181 0 TD (IPsec)Tj -1165.0002 101 TD [(With)-19999.8(this)-19000.2(pap)-1999.8(e)0(r)-20000(w)]TJ 666.0002 0 TD 19 Tc [(ei)19000.2(n)]TJ 123 0 TD 0.0001 Tc [(tend)-18999.7(to)-18999.9(giv)]TJ 379.9998 0 TD 0 Tc [(e)-17000(a)-19000.2(go)-1999.8(o)-2000(d)-18000(o)]TJ 349.0002 0 TD (v)Tj 42 0 TD 0.0001 Tc (erview)Tj -1643 100 TD 0 Tc [(of)-31000(the)-32000(cryptograph)]TJ 686 0 TD [(y)-29000(curren)]TJ 302.9998 0 TD [(tly)-31000(distributed)-32000(a)0.5(nd)-31000(used)]TJ -988.9998 99 TD [(in)-29000(Op)-2000.2(enBSD)-29999.8(and)-29000(of)-29000.2(our)-29000(plans)-28000.2(for)-29000(future)-30000(w)]TJ 1577.9995 0 TD 0.0003 Tc (ork)Tj 182.0005 0 TD 0 Tc (W)Tj 78 0 TD (e)Tj -1838 100 TD [(hop)-2000.2(e)-19000(this)-18999.8(will)-18000.2(b)-1999.8(e)-19000.2(of)-19000(in)]TJ 749 0 TD [(terest)-18000(b)-1999.8(oth)-19000(t)0.2(o)-19000(e)0(nd users)-17000(and)-19000(ad )]TJ -749 99 TD [(ministrators)-24000(l)0(o)-2000(o)-0.2(king)-23999.8(for)-25000.2(b)-1999.8(e)0(tter)-25000.2(w)]TJ 1180 0 TD (a)Tj 40 0 TD [(ys)-24000.2(to)-25000.2(protect)-24999.5(their)]TJ -1220 100 TD -0.0001 Tc (host)Tj 186 0 TD 0 Tc [(and)-31999.8(n)-0.2(et)]TJ 278.9998 0 TD (w)Tj 58.0002 0 TD -0.0001 Tc (orks)Tj 208 0 TD (and)Tj 166 0 TD 0 Tc (to)Tj 107 0 TD (dev)Tj 125 0 TD [(elop)-2000.2(ers)-31999.8(in)]TJ 387 0 TD [(other)-32000(s)0(ys )]TJ -1516 100 TD -0.0001 Tc (tems)Tj 210 0 TD 0 Tc (free)Tj 202 0 TD (or)Tj 112 0 TD (otherwise)Tj 413 0 TD 0.0001 Tc (that)Tj 190.9998 0 TD 0 Tc (are)Tj 149 0 TD (considering)Tj 445.0002 0 TD (sup )Tj -1722 99 TD [(p)-2000(o)0.2(rting)-22999.8(s)-0.2(ome)-23000.2(o)0(f)-24000(these)-23000.2(mec)]TJ 933 0 TD -0.0001 Tc (hanisms)Tj 350 0 TD 0 Tc (W)Tj 78 0 TD [(e)-24000(should)-22999.5(again)]TJ -1361 100 TD (caution)Tj 318 0 TD -0.0001 Tc (the)Tj 164.9998 0 TD 0 Tc (readers)Tj 338.0002 0 TD (ho)Tj 85.9998 0 TD (w)Tj 58 0 TD (ev)Tj 79 0 TD (er)Tj 146 0 TD 0.0001 Tc (that)Tj 203 0 TD -0.0001 Tc (cryptograph)Tj 441.0002 0 TD 0 Tc (y)Tj -1834 100 TD -0.0001 Tc [(do)-2000.1(es)]TJ 198 0 TD 0 Tc (not)Tj 158 0 TD (solv)Tj 140 0 TD (e)Tj 72.9998 0 TD 0.0001 Tc (all)Tj 126 0 TD 0 Tc (securit)Tj 239.0002 0 TD (y)Tj 80.9998 0 TD (problems)Tj 366 0 TD 0.0002 Tc (in)Tj 108.0002 0 TD 0 Tc (an)Tj 125 0 TD -0.0001 Tc [(op)-2000.1(erat )]TJ -1614 99 TD 0 Tc [(ing)-26999.8(system)-28000(and)-27000(should)-28000.2(not)-27000.2(b)-2000(e)-28000(c)0(onsidered)-27000(a)0(s)-27000(a)0(n)-27000(e)0(nd)]TJ 0 100 TD [(in)-28000(itself)-28000(b)-0.2(ut)-28000.2(rather)-27000.2(as)-27000(an)-26999.8(imp)-2000(ortan)]TJ 1273 0 TD 0.0001 Tc [(t)-26999.9(p)0.3(iece)-27999.4(of)-27999.9(the)-27999.4(se )]TJ -1273 98.9998 TD -0.0001 Tc (curit)Tj 169 0 TD 0 Tc [(y)-26999.8(p)-0.2(uzzle)]TJ /T5 1 Tf -169 204 TD ( )Tj 237.9998 0 TD (P)Tj 68.0002 0 TD -0.0001 Tc [(ap)-3000.3(er)]TJ 237.9998 0 TD 0 Tc (Organization)Tj /T6 1 Tf -461 203.0002 TD (The)Tj 200 0 TD (remainder)Tj 423.0002 0 TD (of)Tj 124 0 TD -0.0001 Tc (this)Tj 191 0 TD [(pap)-2000.1(er)]TJ 263 0 TD 0 Tc (is)Tj 113 0 TD (organized)Tj 404 0 TD (as)Tj -1801 100 TD (follo)Tj 152.9998 0 TD (ws)Tj 196.0002 0 TD (section)Tj 299 0 TD ( )Tj 90.9998 0 TD [(describ)-2000(es)]TJ 376 0 TD 0.0001 Tc (the)Tj 165.0002 0 TD 0 Tc (v)Tj 39 0 TD (arious)Tj 267 0 TD (net)Tj 113 0 TD (w)Tj 58 0 TD (ork)Tj -1757 99 TD (securit)Tj 238.9998 0 TD (y)Tj 96.0002 0 TD (facilities)Tj 351 0 TD (implemen)Tj 348 0 TD -0.0001 Tc (ted)Tj 168.9998 0 TD 0.0001 Tc (and)Tj 187 0 TD -0.0001 Tc [(supp)-2000.6(orted)]TJ 416.0002 0 TD -0.0005 Tc (in)Tj -1806 100 TD 0 Tc [(Op)-2000(enBSD)-26000(section)-24000(\012)-25000(c)0(o)]TJ 831 0 TD (v)Tj 42 0 TD [(ers)-23000(the)-25000(e)0(xtensiv)]TJ 560 0 TD 0.0001 Tc [(e)-23999.9(u)0.6(se)-24999.9(of)-24999.9(ran )]TJ -1433 98.9998 TD -0.0001 Tc (dom)Tj 192 0 TD 0 Tc (n)Tj 44 0 TD -0.0002 Tc (um)Tj 113 0 TD 2 Tc [(be)2000(r)]TJ 151.9998 0 TD 0 Tc (generators)Tj 434.0002 0 TD (and)Tj 169 0 TD (section)Tj 283.9998 0 TD ()Tj 76 0 TD 0.0001 Tc (briey)Tj 262.9998 0 TD 0.0003 Tc (out )Tj -1726.9995 100.0002 TD 0 Tc (lines)Tj 198 0 TD (our)Tj 156 0 TD (future)Tj 255 0 TD (plans)Tj 225 0 TD -0.0002 Tc (in)Tj 105.9998 0 TD -0.0001 Tc (this)Tj 170.0002 0 TD (area)Tj 237 0 TD 0 Tc (Section)Tj 298 0 TD (\015)Tj 78 0 TD 0.0001 Tc (con )Tj -1723 100 TD 0 Tc [(cludes)-28000.2(the)-28000.2(p)0.2(ap)-2000(er)]TJ /T1 1 Tf 0 318.9999 TD ()Tj 168 0 TD (Comm)Tj 321.9998 0 TD (unications)Tj 533.0002 0 TD (Securit)Tj 344 0 TD (y)Tj /T6 1 Tf -1284.0002 203 TD (In)Tj 112 0 TD 0.0002 Tc (an)Tj 124 0 TD 0 Tc (increasingly)Tj 464.0002 0 TD (net)Tj 113 0 TD (w)Tj 58 0 TD (ork)Tj 117 0 TD (ed)Tj 116.9998 0 TD (en)Tj 81 0 TD (vironmen)Tj 338.0002 0 TD (t)Tj 93 0 TD 0.0001 Tc (com )Tj -1700 100 TD 0 Tc (m)Tj 67 0 TD [(unications)-27999.8(securit)]TJ 637 0 TD [(y)-26999.8(s)-0.2(upp)-2000.2(o)0.2(rt)-28000(in)-29000(an)-27000(OS)-28000(is)-29000(extremely)]TJ -704 100 TD [(imp)-1999.8(ortan)]TJ 332.9998 0 TD (t)Tj 185.0002 0 TD (As)Tj 153 0 TD -0.0001 Tc (there)Tj 243.9998 0 TD 0 Tc (are)Tj 169.0002 0 TD (dieren)Tj 267.9998 0 TD (t)Tj 91 0 TD (mec)Tj 141.0002 0 TD (hanisms)Tj -1584 99 TD -0.0001 Tc (and)Tj 169 0 TD 0 Tc (dieren)Tj 268 0 TD (t)Tj 67 0 TD -0.0002 Tc (la)Tj 63 0 TD 0 Tc (y)Tj 42 0 TD (ers)Tj 137 0 TD (where)Tj 247 0 TD -0.0001 Tc (one)Tj 159.9998 0 TD 0.0002 Tc (ma)Tj 109 0 TD 0 Tc (y)Tj 79.0002 0 TD (apply)Tj 236 0 TD (securit)Tj 239 0 TD (y)Tj 36.9995 0 TD ()Tj -1852.9995 100 TD -0.0001 Tc [(Op)-2000.1(enBSD)]TJ 398 0 TD 0 Tc [(supp)-2000(orts)]TJ 345.9998 0 TD (a)Tj 76 0 TD (n)Tj 44 0 TD 0.0002 Tc (um)Tj 113 0 TD 2 Tc [(be)1999.8(r)]TJ 151 0 TD 0.0002 Tc (of)Tj 101.0002 0 TD 0 Tc (securit)Tj 238.9998 0 TD (y)Tj 77.0002 0 TD [(proto)-2000(cols)]TJ -1545 99.0001 TD [(and)-28000.2(mec)]TJ 302.9998 0 TD [(hanisms)-29000.2(some)-27999.8(of)-27999.8(whic)]TJ 812 0 TD 29 Tc (hw)Tj 133.0002 0 TD 0 Tc [(ere)-28000(dev)]TJ 260 0 TD [(elop)-2000(ed)-28000(or)]TJ -1508 100 TD (ev)Tj 79 0 TD (en)Tj 121 0 TD (designed)Tj 381 0 TD (b)Tj 43.9998 0 TD (y)Tj 83.0002 0 TD (our)Tj 159 0 TD -0.0001 Tc (dev)Tj 125 0 TD 0 Tc [(elop)-2000.2(ers)]TJ 344.9998 0 TD 0.0002 Tc (In)Tj 115 0 TD 0 Tc (some)Tj 219.0002 0 TD -0.0001 Tc (cases)Tj -1671 100 TD 0 Tc (there)Tj 219.9998 0 TD 0.0002 Tc (is)Tj 92.0002 0 TD 0 Tc (considerable)Tj 479 0 TD (o)Tj 40 0 TD (v)Tj 42 0 TD (erlap)Tj 214 0 TD (in)Tj 105 0 TD (functionalit)Tj 415 0 TD (y)Tj 37 0 TD ()Tj 82.9995 0 TD 0.0003 Tc (One)Tj -1726.9995 99 TD 0 Tc [(of)-30000(our)-30000(g)0.2(oals)-27999.8(is)-29999.8(to)-30000.2(ev)]TJ 726.9998 0 TD (en)Tj 81.0002 0 TD [(tually)-30000(mak)]TJ 392.9998 0 TD [(e)-29000.2(i)0.2(t)-31000(t)-0.2(ransparen)]TJ 540.0002 0 TD 28 Tc [(tt)28000(o)]TJ -1741 100 TD -0.0001 Tc (the)Tj 154 0 TD 0 Tc (end)Tj 166.9998 0 TD 0.0001 Tc (user)Tj 187 0 TD (whic)Tj 164.0002 0 TD 0 Tc (h)Tj 84 0 TD (suc)Tj 113.9998 0 TD (h)Tj 84.0002 0 TD (securit)Tj 239 0 TD (y)Tj 81 0 TD (mec)Tj 140.9998 0 TD (hanism)Tj 297.0002 0 TD (is)Tj 94 0 TD -0.0005 Tc (in)Tj -1806 100 TD 0 Tc (use)Tj 82.9998 100.9999 TD (The)Tj 188 0 TD (follo)Tj 153.0002 0 TD -0.0001 Tc (wing)Tj 214.9998 0 TD 0 Tc (sections)Tj 327.0002 0 TD -0.0001 Tc (giv)Tj 107 0 TD 0 Tc (e)Tj 81 0 TD (a)Tj 85.9998 0 TD (brief)Tj 209.0002 0 TD (o)Tj 40 0 TD (v)Tj 42 0 TD -0.0001 Tc (erview)Tj 277 0 TD 0 Tc (of)Tj -1808 99.0001 TD (these)Tj 224 0 TD (mec)Tj 140.9998 0 TD (hanisms)Tj 356.0002 0 TD -0.0001 Tc (some)Tj 218.9998 0 TD 0 Tc (detail)Tj 241 0 TD 0.0002 Tc (of)Tj 106 0 TD 0 Tc (their)Tj 210.0002 0 TD (implemen )Tj ET endstream endobj 3 0 obj << /ProcSet [/PDF /Text ] /Font << /T1 4 0 R /T2 5 0 R /T3 6 0 R /T4 7 0 R /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 11 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 15 0 obj << /Length 22679 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 709.14 Tm 0 g /GS1 gs 0 Tc 0 Tw (tation)Tj 249.9999 0 TD 0.0001 Tc [(and)-31999.9(i)0.2(n)]TJ 233.0001 0 TD 0 Tc [(tegration)-32000(in)]TJ 463 0 TD [(Op)-2000(enBSD)]TJ 420 0 TD [(and)-32000(our)]TJ 319.0001 0 TD (plans)Tj -1685.0001 100 TD 0.0001 Tc (for)Tj 136 0 TD 0 Tc (future)Tj 257 0 TD (w)Tj 58 0 TD (ork)Tj 205.0001 0 TD -0.0001 Tc (As)Tj 131.9999 0 TD 0 Tc (w)Tj 58 0 TD (e)Tj 73 0 TD (already)Tj 303 0 TD (men)Tj 150 0 TD (tioned)Tj 263.0001 0 TD -0.0002 Tc (in)Tj 105.9998 0 TD 0.0001 Tc (sec )Tj -1740.9999 99 TD -0.0001 Tc (tion)Tj 182.0001 0 TD ()Tj 106.9999 0 TD 0 Tc (w)Tj 58.0001 0 TD (e)Tj 75 0 TD (consider)Tj 334.9999 0 TD (IPsec)Tj 232 0 TD 0.0001 Tc (an)Tj 127 0 TD 0 Tc (extremely)Tj 394.0001 0 TD [(imp)-2000.2(ortan)]TJ 333 0 TD (t)Tj -1843.0001 100 TD [(to)-2000(ol)-30000(in)-30000(net)]TJ 383 0 TD (w)Tj 58.0001 0 TD [(ork)-28999.9(s)-0.1(ecurit)]TJ 387 0 TD (y)Tj 36.9999 0 TD [()-30000.1(b)-1999.9(oth)-31000(b)-2000(ecause)-30000(of)-30000(its)-30000(p)-1999.8(o)-0.2(ten )]TJ -865 100 TD [(tial)-29000.1(for)-28999.9(user transparency)-26000(and)-29000(its)-29000(exibilit)]TJ 1526.9999 0 TD (y)Tj 37 0 TD ()Tj 64 0 TD 0.0001 Tc [(This)-28999.9(is)]TJ -1627.9999 99 TD 0 Tc [(reected)-28000(b)]TJ 377 0 TD [(y)-27000(the)-28000.1(more)-27000(thorough)-27000.1(co)]TJ 855 0 TD (v)Tj 42.0001 0 TD [(erage)-25000(o)0(f)-28000(I)0.2(Psec)-27000(in)]TJ -1274.0001 100 TD [(the)-28000(t)0.1(ext)-28000.1(that)-28000(follo)]TJ 649 0 TD (ws)Tj -566 100 TD [(Other)-27000(p)-1999.9(opular)-27000(mec)]TJ 688 0 TD [(hanisms)-27000(suc)]TJ 456 0 TD [(h)-27000(a)0(s)-27000(SSH)-27999.8(\012)]TJ 462.9999 0 TD 0.0001 Tc [()-27999.7(are)]TJ -1689.9999 99 TD [(not)-27999.9(c)0.1(o)]TJ 224.9999 0 TD 0 Tc (v)Tj 42.0001 0 TD [(ered)-26000(b)-2000.1(e)0.1(cause)-28000(they)-28000(are)-28000.1(only)-27000(part)-28000.1(of)-27999.8(our)-28000.2(p)-2000(orts)]TJ -267.0001 100 TD (system)Tj 309 0 TD [(While)-29000(v)0(irtually)-27000(a)-0.1(ll)-28000.1(the)-29000.1(d)0.1(ev)]TJ 965.0001 0 TD [(elop)-2000.1(ers)-25999.8(u)-0.2(se)-28000(SSH)]TJ -1274.0001 98.9995 TD (there)Tj 218 0 TD 0.0001 Tc (is)Tj 90 0 TD (no)Tj 121 0 TD 0 Tc (free)Tj 166 0 TD (implemen)Tj 348.0001 0 TD (tation)Tj 250 0 TD (w)Tj 57.9999 0 TD (e)Tj 71 0 TD (can)Tj 158.0001 0 TD (add)Tj 167 0 TD (to)Tj 108 0 TD (our)Tj -1755.0001 100 TD [(standard)-19000(d)-0.1(istribution)]TJ 821 0 TD (F)Tj 47 0 TD [(urthermore)-21000(the)-20000.1(curren)]TJ 817.0001 0 TD 19 Tc (tv)Tj 92.9998 0 TD 0.0001 Tc (er )Tj -1777.9999 100 TD 0 Tc [(sion)-32000(o)0.1(f)-31999.9(S)-0.1(SH)]TJ 462 0 TD (is)Tj 88.0001 0 TD [(restricted)-31000(b)]TJ 418 0 TD [(y)-31999.9(the)-32000(RSA)]TJ 425 0 TD (paten)Tj 201 0 TD 31.9998 Tc [(ti)31999.6(n)]TJ 166 0 TD 0 Tc (the)Tj -1760.0001 99 TD [(US)-26000.1(W)]TJ 235.0001 0 TD 25 Tc [(ea)25000.1(r)24999.9(e)0.1(w)]TJ 256.9999 0 TD 0 Tc [(aiting)-24000(for)-25000(a)-25000(f)0(ree)-25000(implemen)]TJ 929 0 TD -0.0001 Tc [(tation)-25000.1(to)-25000.3(b)-2000.1(e)-0.1( )]TJ -1421 100 TD 0 Tc [(come)-28999.9(a)]TJ 254.0001 0 TD (v)Tj 38.9999 0 TD [(ailable)-27000(a)0(s)-29000(p)-0.1(art)-27999.9(o)0(f)-29000.1(t)0.1(he)-30000(IETF)-29000.1(standardization)]TJ -293 100 TD [(pro)-2000(c)0(ess)]TJ 297.0001 0 TD -0.0001 Tc (of)Tj 101 0 TD 0 Tc (SSH)Tj 212.9999 0 TD 0.0001 Tc (Suc)Tj 127 0 TD 0 Tc (h)Tj 80 0 TD (an)Tj 123 0 TD (implemen)Tj 348 0 TD (tation)Tj 250.9999 0 TD (w)Tj 58.0002 0 TD -0.0001 Tc (ould)Tj 191.9998 0 TD 2.0002 Tc (be)Tj -1789.9999 99.0005 TD 0.0001 Tc (link)Tj 134 0 TD 0 Tc [(ed)-27000.1(with)-29000(our)]TJ /T9 1 Tf 447 0 TD (libssl)Tj /T6 1 Tf 264 0 TD ()Tj /T5 1 Tf -845 195 TD ( )Tj 238.0001 0 TD (SSL)Tj /T6 1 Tf -155.0001 195 TD 0.0001 Tc (In)Tj 118.0001 0 TD 0 Tc [(Op)-1999.9(enBSD)]TJ /T9 1 Tf 405.9999 0 TD (libssl)Tj /T6 1 Tf 304 0 TD (pro)Tj 119.0001 0 TD (vides)Tj 222.9998 0 TD (a)Tj 84.0002 0 TD -0.0001 Tc [(to)-2000.1(olkit)]TJ 281 0 TD 0 Tc (for)Tj 142 0 TD (the)Tj -1760.0001 100 TD (Secure)Tj 283 0 TD 0.0001 Tc [(So)-1999.9(c)]TJ 125 0 TD 0 Tc (k)Tj 42.0001 0 TD -0.0001 Tc (et)Tj 116 0 TD (La)Tj 91.9999 0 TD 0 Tc (y)Tj 42.0001 0 TD -0.0001 Tc (er)Tj 115.9999 0 TD 0 Tc (SSL)Tj 224 0 TD (v v\012)Tj 293 0 TD (and)Tj 180.9999 0 TD (T)Tj 53.0002 0 TD [(ransp)-2000.2(ort)]TJ -1567.0001 100 TD (La)Tj 92.0001 0 TD (y)Tj 41.9999 0 TD (er)Tj 108.0001 0 TD (Securit)Tj 252.0001 0 TD (y)Tj 82.9999 0 TD (TLS)Tj 230 0 TD 0.0001 Tc (v)Tj 157 0 TD 0 Tc ()Tj 127 0 TD (whic)Tj 164.0001 0 TD (h)Tj 85.9999 0 TD (pro)Tj 119.0001 0 TD 0.0001 Tc (vide)Tj 188 0 TD 0 Tc (strong)Tj -1648.0001 99 TD (cryptographic)Tj 546 0 TD (protection)Tj 415 0 TD -0.0001 Tc (for)Tj 144.0001 0 TD (net)Tj 113 0 TD 0 Tc (w)Tj 57.9999 0 TD (ork)Tj 163 0 TD (comm)Tj 215.0001 0 TD (unica )Tj -1654.0001 100 TD [(tion)-28000.1(suc)]TJ 285.0001 0 TD 27.9999 Tc [(ha)27999.8(s)1000(s)27999.8(e)28000(r)27999.9(v)]TJ 321.0001 0 TD 0 Tc [(er)-26000(authen)]TJ 343 0 TD [(tication)-27999.9(and)-27000(data)-28000(encryp )]TJ -949.0001 99 TD (tion)Tj 212 0 TD [(The)-30000.1(S)0.1(ecure)-30000(So)-1999.9(c)]TJ 564 0 TD (k)Tj 42 0 TD [(et)-30000(La)]TJ 191 0 TD (y)Tj 42 0 TD [(er)-29000(is)-30000.1(curren)]TJ 415.0001 0 TD 30 Tc [(t)30000.2(l)30000(yu)30000(s)29999.8(e)30000(db)]TJ 365 0 TD 0 Tc (y)Tj -1831.0001 100 TD (w)Tj 58 0 TD [(eb)-19999.9(serv)]TJ 248 0 TD (ers)Tj /T7 1 Tf 145 0 TD (e g )Tj /T6 1 Tf 174.0001 0 TD (Apac)Tj 184.9999 0 TD [(he)-19999.9(as)-18999.9(shipp)-1999.8(e)-0.1(d)-20000(with)-21000(Op)-2000(enBSD)]TJ -810 100 TD 0.0001 Tc (and)Tj 168 0 TD (bro)Tj 119 0 TD 0 Tc [(wsers)-30999.9(lik)]TJ 315 0 TD (e)Tj 70.0001 0 TD [(Netscap)-2000(e)]TJ 361.9999 0 TD (Comm)Tj 238 0 TD (unicator)Tj 378.0001 0 TD (In)Tj 110 0 TD (the)Tj -1760.0001 99 TD (future)Tj 279.0001 0 TD (applications)Tj 468.0001 0 TD -0.0001 Tc (lik)Tj 87.9999 0 TD 0 Tc (e)Tj /T7 1 Tf 72 0 TD (telnet)Tj /T6 1 Tf 234 0 TD (and)Tj /T7 1 Tf 167.9999 0 TD 0.0001 Tc (ftp)Tj /T6 1 Tf 130.0001 0 TD -0.0001 Tc (will)Tj 163.9999 0 TD 2 Tc (be)Tj 120.0002 0 TD 0.0001 Tc (con )Tj -1723.0001 99.9998 TD 0 Tc (v)Tj 42.0001 0 TD [(erted)-22000(t)0(o)-22000.1(u)0(se)-23000(TLS)-22000(p)-2000(ossibly)-23000(ev)]TJ 1039 0 TD [(en)-22000(during)-21999.9(our)-21000(net)]TJ 618 0 TD (w)Tj 58 0 TD -0.0001 Tc (ork)Tj -1757.0001 100.0002 TD 0 Tc [(installation)-27000(pro)-2000(cess)]TJ 83 98.9998 TD 0.0001 Tc (Due)Tj 222 0 TD 0 Tc (to)Tj 150 0 TD (paten)Tj 201.0001 0 TD (t)Tj 107.9999 0 TD (restrictions)Tj /T9 1 Tf 513 0 TD (libssl)Tj /T6 1 Tf 337.9999 0 TD 0.0002 Tc (in)Tj 145.0002 0 TD 0 Tc (the)Tj -1760.0001 100 TD [(Op)-2000.1(enBSD)]TJ 399 0 TD (distribution)Tj 461 0 TD [(supp)-2000(orts)]TJ 347 0 TD 0.0001 Tc (only)Tj 190 0 TD 0 Tc (digital)Tj 265.0001 0 TD (signa )Tj -1662.0001 99 TD (tures)Tj 217.0001 0 TD (with)Tj 197.9999 0 TD (DSA)Tj 209 0 TD ( )Tj 106 0 TD 0.0001 Tc ()Tj 85 0 TD 0 Tc (but)Tj 161 0 TD 0.0001 Tc (an)Tj 124 0 TD 0 Tc (additional)Tj 401.0001 0 TD -0.0001 Tc (pac)Tj 123 0 TD 0 Tc (k)Tj 39 0 TD (age)Tj 156 0 TD (is)Tj -1819.0001 100 TD 0.0001 Tc (pro)Tj 119.0001 0 TD 0 Tc (vided)Tj 239.9999 0 TD (for)Tj 145 0 TD (users)Tj 226 0 TD (outside)Tj 304 0 TD 0.0001 Tc (the)Tj 161 0 TD 0 Tc (USA)Tj 216.0001 0 TD (to)Tj 119 0 TD (add)Tj 178.9998 0 TD 0.0001 Tc (bac)Tj 123 0 TD 0 Tc (k)Tj -1831.9999 100 TD (RSA signature)Tj 570 0 TD ()Tj 106 0 TD ()Tj 63 0 TD [(supp)-2000.1(ort)]TJ 375 0 TD 0.0001 Tc (This)Tj 202 0 TD 0 Tc (is)Tj 95.0001 0 TD (implemen)Tj 347.9998 0 TD (ted)Tj -1758.9999 99 TD (b)Tj 43.9999 0 TD (y)Tj 80.0001 0 TD (pro)Tj 119 0 TD (viding)Tj 259 0 TD (t)Tj 30 0 TD (w)Tj 58 0 TD (o)Tj 77 0 TD (shared)Tj 273 0 TD (libraries)Tj /T9 1 Tf 368 0 TD (libssl so )Tj /T6 1 Tf -1308 100 TD 0.0001 Tc (has)Tj 170.0001 0 TD 0 Tc (only)Tj 203.9999 0 TD (function)Tj 347 0 TD (stubs)Tj 239 0 TD (for)Tj 149 0 TD (RSA)Tj 219 0 TD [(supp)-2000(ort)]TJ 358.0001 0 TD (while)Tj /T9 1 Tf -1686.0001 100 TD (libssl so )Tj /T6 1 Tf 600.0001 0 TD -0.0001 Tc (con)Tj 122.9999 0 TD 0 Tc (tains)Tj 208.0001 0 TD (full)Tj 150.9999 0 TD (RSA)Tj 203 0 TD [(supp)-1999.8(ort)]TJ 357.0001 0 TD (Notice)Tj -1642.0001 99.0001 TD 0.0001 Tc (that)Tj 191.0001 0 TD 0 Tc (shared)Tj 275.0001 0 TD (library)Tj 281.9999 0 TD (minor v)Tj 283.0001 0 TD (ersion)Tj 250.9999 0 TD (n)Tj 44 0 TD (um)Tj 113 0 TD 2 Tc [(be)2000(r)]TJ 155.9999 0 TD 0 Tc (c)Tj 35.0002 0 TD (hanges)Tj -1630.0001 100 TD (t)Tj 30 0 TD [(ypically)-27000(indicate)-28000.1(in)]TJ 690 0 TD (terface transparen)Tj 659 0 TD [(t)-25000(bug)-27000(xes)]TJ /T5 1 Tf -1379 195.0001 TD ()Tj 238.0001 0 TD -0.0001 Tc (IP)Tj 145.9999 0 TD 0 Tc (Securit)Tj 320 0 TD (y)Tj 91 0 TD (IPsec)Tj /T10 1 Tf -795 194.9999 TD ( )Tj 292.0001 0 TD -0.0001 Tc (Bac)Tj 152.9999 0 TD 0 Tc (kground)Tj /T6 1 Tf -445 153 TD (While)Tj 249.9999 0 TD 0.0001 Tc (IP)Tj 122.0001 0 TD -0.0001 Tc (has)Tj 156.0001 0 TD (pro)Tj 119 0 TD 0 Tc (v)Tj 41.9999 0 TD (en)Tj 117.0001 0 TD -0.0001 Tc (to)Tj 109.9999 0 TD 2 Tc (be)Tj 120 0 TD -0.0001 Tc (an)Tj 124 0 TD 0 Tc (ecien)Tj 247 0 TD (t)Tj 67.0001 0 TD (and)Tj 170 0 TD (robust)Tj -1644.0001 100 TD [(proto)-1999.9(col)]TJ 346 0 TD (when)Tj 238 0 TD (it)Tj 103 0 TD (comes)Tj 266 0 TD (to)Tj 122 0 TD (actually)Tj 337.0001 0 TD (getting)Tj 301.9998 0 TD (data)Tj -1713.9999 99 TD (across)Tj 255 0 TD (the)Tj 152.0001 0 TD -0.0001 Tc (In)Tj 73.9999 0 TD 0 Tc (ternet)Tj 279 0 TD (it)Tj 92 0 TD [(do)-2000(es)]TJ 197.0001 0 TD (not)Tj 157 0 TD (inheren)Tj 266 0 TD -0.0001 Tc (tly)Tj 135 0 TD 0 Tc (pro)Tj 118.9998 0 TD -0.0001 Tc (vide)Tj -1725.9999 100 TD 0.0001 Tc (an)Tj 86 0 TD 0 Tc (y)Tj 84.0001 0 TD (protection)Tj 409.9999 0 TD 0.0001 Tc (of)Tj 108 0 TD 0 Tc (that)Tj 192 0 TD (data)Tj 261 0 TD (There)Tj 253 0 TD (are)Tj 151.9999 0 TD 0.0002 Tc (no)Tj 128.0002 0 TD 0 Tc (facili )Tj -1674.0001 100 TD 0.0001 Tc (ties)Tj 161 0 TD 0 Tc (to)Tj 109.0001 0 TD -0.0001 Tc (pro)Tj 118.9999 0 TD 0 Tc (vide)Tj 184 0 TD (conden)Tj 298 0 TD (tialit)Tj 173 0 TD (y)Tj 37.0001 0 TD ()Tj 59.9999 0 TD (or)Tj 110 0 TD (to)Tj 109 0 TD (ensure)Tj 266.9999 0 TD 0.0001 Tc (the)Tj 151 0 TD (in )Tj -1777.9999 99.0001 TD 0 Tc (tegrit)Tj 196.9999 0 TD [(y)-30000.1(o)-0.1(r)-30000(a)0.1(uthen)]TJ 426.0001 0 TD (ticit)Tj 145 0 TD 31 Tc [(yo)31000(f)1000(I)31000(P)30999.9(\012)31000.1()]TJ 396 0 TD 0 Tc [()-31000.1(d)0.1(atagrams)]TJ 501.9999 0 TD [(In)-31000.2(or )]TJ -1665.9999 100 TD [(der)-30000(to)-29000(remedy)-30000(the)-30000(securit)]TJ 929 0 TD 29 Tc (yw)Tj 131 0 TD 0 Tc [(eaknesses)-29000(o)0.2(f)-30000.2(I)0.2(P)]TJ 547.9999 0 TD 29.0002 Tc [(a)-999.8(p)29000.4(a)29000.2(i)29000(r)]TJ -1607.9999 100 TD 0 Tc [(of)-28999.9(proto)-2000(c)0(ols)-27999.9(collectiv)]TJ 752 0 TD [(ely)-28000(called)-29000(IP)-29000.1(Securit)]TJ 736.9999 0 TD (y)Tj 37.0002 0 TD [()-30000(o)0.2(r)-28000.2(IPsec)]TJ -1526.0001 99.0001 TD [(\012)-21000()-0.1()]TJ 192.0001 0 TD [()-21999.9(f)0(or)-20999.9(short)-21999.9(has)-21000.1(b)-1999.9(e)0(en)-21999.9(standardized)-21000.1(b)]TJ 1257 0 TD 0.0001 Tc [(y)-20999.7(t)0.1(he)-21999.7(IETF)]TJ 576 -5317 TD 0 Tc [(The)-20999.8(proto)-2000(cols)-19000(are)-20000.2(ESP)-20000()-0.2(Encapsulating)-20000(Securit)]TJ 1646 0 TD 20 Tc (yP)Tj 118.9995 0 TD 0 Tc (a)Tj 40 0 TD 0.0005 Tc (y )Tj -1804.9995 100 TD 0 Tc [(load)-19000.2( )-19000()0.2(\015)]TJ 393.9998 0 TD [()-20000.2(and)-18999.8(AH)-20000.2(Authen)]TJ 639.0002 0 TD [(tication)-21000(H)0(eader)-19000()]TJ 669.9995 0 TD 20.0005 Tc [()20000.5()]TJ 126 0 TD 0 Tc ()Tj -1828.9995 99 TD -0.0001 Tc [(Both)-25000.3(pro)]TJ 323 0 TD 0 Tc [(vide)-23000(in)]TJ 239.9998 0 TD (tegrit)Tj 197.0002 0 TD (y)Tj 37 0 TD [()-24999.8(a)-0.2(uthen)]TJ 295 0 TD (ticit)Tj 144.9998 0 TD (y)Tj 37.0002 0 TD 0.0001 Tc [()-24999.9(a)0.3(nd)-24999.9(repla)]TJ 386 0 TD 0 Tc [(y)-22999.5(p)-0.5(ro )]TJ -1660 100 TD (tection)Tj 310 0 TD (while)Tj 224 0 TD (ESP)Tj 195 0 TD -0.0001 Tc (adds)Tj 201.9998 0 TD 0 Tc (conden)Tj 298.0002 0 TD (tialit)Tj 172.9998 0 TD (y)Tj 79.0002 0 TD (to)Tj 108.9995 0 TD 0.0003 Tc (the)Tj 151.0005 0 TD 0 Tc (pic )Tj -1741 100 TD (ture)Tj 236 0 TD (IPsec)Tj 230 0 TD -0.0001 Tc (can)Tj 160.9998 0 TD (also)Tj 176 0 TD 2 Tc (be)Tj 122 0 TD 0.0001 Tc (made)Tj 231 0 TD 0 Tc (to)Tj 111.0002 0 TD (protect)Tj 295 0 TD (IP)Tj 124 0 TD (data )Tj -1686 99 TD [(grams)-30000(for)-31000(other)-30999.8(hosts)]TJ 858 0 TD -0.0001 Tc (The)Tj 175 0 TD 0 Tc [(IPsec)-30000.2(e)0(ndp)-2000(oin)]TJ 510 0 TD 0.0001 Tc [(ts)-31999.4(in)-31999.9(this)]TJ -1543 100 TD 0 Tc (arrangemen)Tj 425 0 TD [(t)-24999.8(t)0(hereb)]TJ 286 0 TD [(y)-26999.8(b)-2000.2(ecome)-27000.2(s)0.2(ecurit)]TJ 607 0 TD [(y)-25999.8(g)-0.2(atew)]TJ 281 0 TD (a)Tj 40 0 TD -0.0001 Tc [(ys)-25000.1(and)]TJ -1639 100 TD 0 Tc (tak)Tj 116 0 TD [(e)-27000(p)0.2(art)-26000.2(i)0.2(n)-28000.2(a)-27000(virtual)-27000(priv)]TJ 820 0 TD [(ate)-27000(net)]TJ 250.9998 0 TD (w)Tj 58.0002 0 TD -0.0001 Tc [(ork)-25999.9()-0.3(VPN)-28000.6(where)]TJ -1245 99 TD [(ordinary)-26000.3(IP)-27000.3(pac)]TJ 572 0 TD 0 Tc (k)Tj 41.9998 0 TD [(ets)-26000(are)-26999.8(tunneled)-28000(inside)-28000.2(IPsec)-27000(\012)]TJ 1171.0002 0 TD ()Tj -1702.0002 106 TD (Net)Tj 129.0002 0 TD (w)Tj 57.9998 0 TD (ork la)Tj 210.0002 0 TD (y)Tj 42 0 TD [(er)-29000(securit)]TJ 338 0 TD 31 Tc [(yh)31000.2(a)30999.8(s)-999.8(a)-1000(n)]TJ 345.9998 0 TD 0 Tc (um)Tj 113.0002 0 TD 32 Tc [(b)30000(e)32000(ro)32000(fv)]TJ 291 0 TD 0.0001 Tc [(ery)-30999.9(i)0.1(m )]TJ -1610 100 TD [(p)-1999.9(o)0.3(rtan)]TJ 241 0 TD 0 Tc (t)Tj 65 0 TD -0.0001 Tc (adv)Tj 126.9998 0 TD 0.0002 Tc (an)Tj 86 0 TD 0 Tc [(tages)-32000(o)]TJ 258 0 TD (v)Tj 42 0 TD (er)Tj 102.0002 0 TD (securit)Tj 239 0 TD (y)Tj 76.9998 0 TD 0.0002 Tc (at)Tj 108.0002 0 TD -0.0001 Tc (other)Tj 223 0 TD 0 Tc (la)Tj 63 0 TD (y)Tj 42 0 TD [(ers)-32000(of)]TJ -1673 100 TD [(the)-24000(p)-0.2(roto)-2000(col)-23000.2(s)0.2(tac)]TJ 602.9998 0 TD 0.0002 Tc (k)Tj 101.0002 0 TD -0.0001 Tc (Net)Tj 129 0 TD 0 Tc (w)Tj 58 0 TD (ork la)Tj 209.9998 0 TD (y)Tj 42.0002 0 TD [(er)-21000(proto)-2000(cols)-22000(are)-23000(gen )]TJ -1143 99 TD -0.0001 Tc (erally)Tj 243 0 TD 0 Tc (hidden)Tj 287 0 TD 0.0001 Tc (from)Tj 211 0 TD 0 Tc (applications)Tj 502.9998 0 TD 0.0001 Tc (whic)Tj 164.0002 0 TD 0 Tc (h)Tj 88 0 TD (can)Tj 167 0 TD (there )Tj -1663 100 TD [(fore)-20999.8(automatically)-19999.8(a)-0.2(nd)-21000.2(transparen)]TJ 1218 0 TD [(tly)-19999.8(t)-0.2(ak)]TJ 234.9998 0 TD 21 Tc [(ea)21000.5(d)20999.5(v)]TJ 185.0002 0 TD -0.0005 Tc (an)Tj 86 0 TD -0.0003 Tc (tage)Tj -1724 99 TD 0 Tc (of)Tj 101.9998 0 TD (whatev)Tj 259.0002 0 TD (er)Tj 105 0 TD (net)Tj 113 0 TD (w)Tj 58 0 TD (ork la)Tj 210 0 TD (y)Tj 41.9998 0 TD (er)Tj 102.0002 0 TD (encryption)Tj 420.9998 0 TD (services)Tj 311.0002 0 TD (that)Tj -1723 100 TD [(host)-23000(pro)]TJ 294.9998 0 TD (vides)Tj 241.0002 0 TD [(Most)-23000(imp)-1999.8(o)-0.2(rtan)]TJ 538.9998 0 TD 0.0001 Tc (tly)Tj 92.0002 0 TD 23.9998 Tc [(n)23999.6(e)23999.8(t)]TJ 159.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD (ork la)Tj 210 0 TD (y)Tj 42 0 TD 0.0001 Tc [(er)-19999.4(pro )]TJ -1637 100 TD 0 Tc [(to)-2000(cols)-30000.2(oer)-30999.8(a)-31000.2(r)0.2(emark)]TJ 758 0 TD [(able)-29000.2(exibilit)]TJ 472 0 TD [(y)-31000(n)0.2(ot)-31000(a)]TJ 266 0 TD (v)Tj 39 0 TD [(ailable)-30000(a)0(t)]TJ -1535 99 TD (higher)Tj 263.9998 0 TD 0.0002 Tc (or)Tj 112 0 TD (lo)Tj 63 0 TD 0 Tc (w)Tj 58.0002 0 TD (er)Tj 105.9998 0 TD (la)Tj 63.0002 0 TD (y)Tj 42 0 TD 0.0001 Tc (ers)Tj 191.9998 0 TD (They)Tj 225 0 TD (can)Tj 162 0 TD (pro)Tj 119 0 TD 0 Tc (vide)Tj 187.0002 0 TD -0.0001 Tc (securit)Tj 239 0 TD 0 Tc (y)Tj -1832 100 TD (on)Tj 127.9998 0 TD (an)Tj 129 0 TD (end to end)Tj 428.0002 0 TD (securing)Tj 369 0 TD (the)Tj 156 0 TD (data)Tj 201.9998 0 TD 2.0002 Tc [(be)2000.2(t)]TJ 115.0002 0 TD 0 Tc (w)Tj 58 0 TD (een)Tj 161 0 TD (t)Tj 30 0 TD (w)Tj 58 0 TD (o)Tj -1834 100 TD [(hosts)-29999.8(route to route)-28000.2(securing)-30000(d)0.2(ata)-29000.2(passing)-28999.5(o)]TJ 1693 0 TD (v)Tj 42 0 TD [(er)-28000(a)]TJ -1735 98.9998 TD [(particular)-29000(s)0.2(et)-30999.8(of)-30000(links)-32000(edge to edge)-29000.2(securing)-30000(data)]TJ 0 100 TD [(as)-19999.8(it)-19999.8(passes)-18999.8(from)-20000(a)-20000()-0.2(secure)-18999.8(net)]TJ 1102.9998 0 TD (w)Tj 58.0002 0 TD [(ork)-19000(t)0.2(o)-20000(a)-0.2(n)-20000(insecure)]TJ -1161 99 TD [(one)-28000(o)-0.2(r)-26000(a)-26999.8(com)]TJ 524 0 TD [(bination)-27000(of)-28000(these)]TJ /T10 1 Tf -524 251 TD ( )Tj 292 0 TD [(Op)-3000(eration)]TJ /T6 1 Tf -292 165.0002 TD (Cen)Tj 141 0 TD (tral)Tj 171.9998 0 TD (to)Tj 116.0002 0 TD [(b)-1999.8(oth)]TJ 210.9998 0 TD 0.0001 Tc (ESP)Tj 201.0002 0 TD 0 Tc (and)Tj 177 0 TD (AH)Tj 167 0 TD (are)Tj 152.9998 0 TD 0.0002 Tc (an)Tj 130 0 TD -0.0001 Tc (abstraction)Tj -1467.9998 100 TD 0 Tc [(called)-29000(s)0.2(ecurit)]TJ 475.9998 0 TD [(y)-28000.2(a)0.2(sso)-1999.8(c)-0.2(iation)-28000.2(o)0.2(r)-28000.2(SA)-29000(In)-30000(eac)]TJ 1003.0002 0 TD 27.9995 Tc [(hS)27999(A)-1000(t)27999(h)27999.5(e)28000(r)27999(e)]TJ -1479 99 TD 0 Tc (is)Tj 98 0 TD (information)Tj 464.9998 0 TD (algorithm)Tj 426 0 TD -0.0001 Tc (IDs)Tj 196.0002 0 TD 0 Tc (k)Tj 41.9998 0 TD 0.0001 Tc (eys)Tj /T7 1 Tf 182.0002 0 TD 0 Tc (etc )Tj /T6 1 Tf 129 0 TD ()Tj 114.9995 0 TD (stored)Tj -1652.9995 100 TD (describing)Tj 414.9998 0 TD 0.0002 Tc (ho)Tj 86 0 TD 0 Tc (w)Tj 110.0002 0 TD -0.0001 Tc (the)Tj 164.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD -0.0002 Tc (an)Tj 85.9998 0 TD 0 Tc (ted)Tj 164.0002 0 TD (protection)Tj 420 0 TD (should)Tj 285.9995 0 TD 2.0005 Tc (be)Tj -1789.9995 100 TD 0 Tc (setup)Tj 294 0 TD (F)Tj 47 0 TD -0.0002 Tc (or)Tj 115 0 TD 0 Tc (t)Tj 30 0 TD (w)Tj 57.9998 0 TD (o)Tj 82 0 TD [(p)-2000.2(eers)]TJ 228.0002 0 TD (to)Tj 114 0 TD 1.9998 Tc (be)Tj 127 0 TD -0.0001 Tc (able)Tj 188 0 TD -0.0002 Tc (to)Tj 115 0 TD 0 Tc (comm)Tj 215 0 TD (unicate)Tj -1613 99 TD -0.0001 Tc (they)Tj 200 0 TD (need)Tj 206.9998 0 TD 0.0001 Tc (matc)Tj 178.0002 0 TD -0.0001 Tc (hing)Tj 198 0 TD 0 Tc (SAs)Tj 181.9998 0 TD 0.0002 Tc (at)Tj 115.0002 0 TD 0 Tc (eac)Tj 113.9998 0 TD (h)Tj 86.0002 0 TD 0.0001 Tc (end)Tj 229 0 TD -0.0001 Tc (When)Tj 255 0 TD 0 Tc (de )Tj -1764 100 TD (ciding)Tj 251.9998 0 TD 0.0001 Tc (what)Tj 215.0002 0 TD -0.0002 Tc (SA)Tj 143 0 TD 0 Tc (should)Tj 270.9998 0 TD 2.0002 Tc (be)Tj 120 0 TD 0.0001 Tc (used)Tj 197.0002 0 TD -0.0001 Tc (for)Tj 134 0 TD 0 Tc [(outb)-2000(ound)]TJ 384 0 TD (traf )Tj -1716 100 TD -0.0001 Tc (c)Tj 141 0 TD 0 Tc (some)Tj 215 0 TD -0.0001 Tc (kind)Tj 193 0 TD 0 Tc (of)Tj 100 0 TD (securit)Tj 238.9998 0 TD (y)Tj 77 0 TD -0.0001 Tc [(p)-2000.1(o)-0.3(licy)]TJ 251.0002 0 TD 0 Tc (database)Tj 353 0 TD (needs)Tj 232 0 TD (to)Tj -1801 99 TD [(b)-2000(e)-29999.8(consulted)]TJ 521 0 TD -0.0001 Tc [(In)-30000.1(Op)-1999.9(enBSD)-29000.1(this)-30000.3(is)-29000.1(curren)]TJ 1001 0 TD 0 Tc [(tly)-28000(imple )]TJ -1522 100 TD (men)Tj 150 0 TD [(ted)-29999.8(a)-0.2(s)-30000(a)0(n)-29000(extension)-30000(to)-30000.2(the)-30000.2(r)0.2(outing)-29000(table)-31000(where)]TJ -150 100 TD (sourcedestination)Tj 718 0 TD (addresses)Tj 414 0 TD [(proto)-2000(col)]TJ 374 0 TD (and)Tj 182 0 TD 2 Tc [(po)2000.5(r)1999.5(t)2000(s)]TJ -1688 99 TD -0.0001 Tc (serv)Tj 144.9998 0 TD 0 Tc [(e)-26000(a)-0.2(s)-27000(selectors)]TJ -62 106 TD [(Lo)-2000(oking)-19999.8(a)0(t)-22000.2(t)0(he)-21000(wire)-21000(format)-21999.8(I)-0.2(Psec)-21000(w)]TJ 1280 0 TD [(orks)-20000(b)]TJ 216.0002 0 TD [(y)-21000(insert )]TJ -1579 99.9999 TD [(ing)-28999.8(an)-29000(extra)-29000.2(header)-29000(b)-2000.2(e)0(t)]TJ 859 0 TD (w)Tj 58 0 TD [(een)-28999.8(the)-30000.2(I)0(P)-28999.8(h)-0.2(eader)-28000(and)-30000(the)]TJ -917 100 TD -0.0002 Tc (pa)Tj 86 0 TD -0.0001 Tc (yload)Tj 253.9998 0 TD 0 Tc [(This)-23000.2(header)-22999.8(h)-0.2(olds)-22999.8(IPsec sp)-2000(ecic)-22000(data)-22999.5(suc)]TJ 1488.9998 0 TD (h)Tj -1828.9995 99 TD (as)Tj 114.9998 0 TD (an)Tj 129.0002 0 TD (an)Tj 86 0 TD (ti repla)Tj 262 0 TD (y)Tj 82.9998 0 TD (sequence)Tj 357.0002 0 TD (n)Tj 43.9998 0 TD 0.0002 Tc (um)Tj 113 0 TD 2 Tc [(be)1999.8(r)2000()]TJ 185.0002 0 TD 0 Tc (cryptographic)Tj -1374 100 TD 0.0001 Tc (sync)Tj 157.9998 0 TD 0 Tc [(hronization)-27000(data)-29000(and)-29000(i)0(n)]TJ 883 0 TD (tegrit)Tj 197 0 TD 28.0002 Tc (yc)Tj 107.0002 0 TD -0.0001 Tc (hec)Tj 117.9998 0 TD 29 Tc (kv)Tj 112.0002 0 TD -0.0002 Tc (alues)Tj 245 0 TD 0 Tc (If)Tj -1820 99 TD -0.0001 Tc [(the)-28000.3(s)0.1(ecurit)]TJ 381.9998 0 TD 0 Tc [(y)-27000(p)-0.2(roto)-1999.8(col)-25999.8(i)0(n)-28000(u)-0.2(se)-27000(is)-28000(ESP)]TJ 873.0002 0 TD [()-27000(a)-27000(cryptographic)]TJ -1255 100 TD (transform)Tj 387.9998 0 TD 0.0002 Tc (is)Tj 90 0 TD 0 Tc (applied)Tj 297 0 TD (to)Tj 108.0002 0 TD (the)Tj 149 0 TD -0.0002 Tc (pa)Tj 86 0 TD -0.0001 Tc (yload)Tj 230 0 TD 0 Tc (in place)Tj 340 0 TD (eec )Tj -1688 100 TD (tiv)Tj 97 0 TD [(ely)-18000.2(h)0.2(iding)-19000(t)-0.2(he)-19000(data)]TJ 720 0 TD [(As)-18999.8(an)-18000(example)-19999.8(a)-0.2(n)-19000(UDP)-19000(data )]TJ -817 99 TD [(gram)-26000(protected)-28000(b)]TJ 625.9998 0 TD -0.0001 Tc [(y)-27000.3(E)-0.1(SP)-27000.3(is)-27000.3(sho)]TJ 460.0002 0 TD 0 Tc [(wn)-26999.8(in)-28000(gure)-27000()0()]TJ -1003.0002 106 TD [(This)-29000(mo)-2000(de)-28000.2(of)-29000(op)-2000(eration)-27000(i)0.2(s)-29000(c)0(alled)-28000(transp)-2000(ort)-27999.5(mo)-2000(de)]TJ -82.9998 100 TD (as)Tj 107.9998 0 TD [(opp)-2000.2(o)0(sed)]TJ 327.0002 0 TD (to)Tj 107 0 TD (tunnel)Tj 264 0 TD -0.0001 Tc [(mo)-2000.1(de)]TJ 230 0 TD (whic)Tj 163.9998 0 TD 0 Tc (h)Tj 79.0002 0 TD -0.0002 Tc (is)Tj 89 0 TD 0 Tc (t)Tj 30 0 TD (ypically)Tj 315 0 TD -0.0002 Tc (used)Tj -1713 100 TD 0 Tc [(when)-23999.8(a)-23000(s)-0.2(ecurit)]TJ 517 0 TD 0.0001 Tc [(y)-22999.9(g)0.3(atew)]TJ 277.9998 0 TD 0 Tc (a)Tj 40.0002 0 TD [(y)-20999.8(i)-0.2(s)-24000(p)0.2(rotecting)-23000(datagrams)-22000(for)]TJ -835 99.0001 TD (other)Tj 232.9998 0 TD (hosts)Tj 293 0 TD (T)Tj 53.0002 0 TD (unnel)Tj 240.9998 0 TD [(mo)-2000.2(de)]TJ 240.0002 0 TD (diers)Tj 263 0 TD 0.0001 Tc (from)Tj 212 0 TD 0 Tc [(transp)-2000(ort)]TJ -1535 100 TD 0.0001 Tc [(mo)-1999.7(de)-20999.9(b)]TJ 261 0 TD 0 Tc [(y)-20000(t)0.2(he)-21000.2(addition)-21000(of)-20999.8(a)-20000(n)-0.2(ew)-22000.2(o)0.2(uter)-22000(I)0(P)-19999.8(header)-20000(con )]TJ -261 100 TD [(sisting)-23000.2(o)0(f)-23999.8(t)0(he)-24000(securit)]TJ 724 0 TD -0.0001 Tc [(y)-23000.1(g)-0.1(atew)]TJ 277.9998 0 TD 0 Tc (a)Tj 40.0002 0 TD [(ys)-21000(a)-0.2(ddresses)-23000(instead)-23000(of)]TJ -1042 99.0001 TD [(the)-23000(a)-0.2(ctual)-21999.8(source)-21000(and)-23000(d)-0.2(estination)-23000.2(as)-22000.2(sho)]TJ 1451.9998 0 TD -0.0001 Tc [(wn)-22000.1(in)-23000.6(gure)]TJ ET endstream endobj 16 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T9 17 0 R /T10 18 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 20 0 obj << /Length 18047 >> stream BT /TT2 1 Tf 9.4922 0 0 9.4922 224.0508 640.8427 Tm 0 0 0 rg /GS1 gs 0 Tc 0 Tw (Encrypted)Tj ET 0 0 0 RG 0 J 0 j 1.582 w 10 M []0 d 1 i 129.129 717.307 55.371 -44.824 re 239.871 717.307 55.371 -44.824 re 184.5 717.307 55.371 -44.824 re 184.5 664.573 m 184.5 646.116 l 218.777 646.116 l 266.238 646.116 m 295.242 646.116 l 295.242 664.573 l S BT 9.4922 0 0 9.4922 84.3047 685.6669 Tm (Header)Tj 0.8333 1.3889 TD (IP)Tj 4.7222 -1.3889 TD (Header)Tj 0.8333 1.3889 TD [(ESP)-4110.2(UDP)]TJ 5.2778 -1.3889 TD [(Header)-3502.2(Data)]TJ 6.1111 1.3889 TD (UDP)Tj ET 73.758 717.307 55.371 -44.824 re S BT /T6 1 Tf 0.12 0 0 -0.12 106.2 615.66 Tm 0 g -0.0001 Tc [(Figure)-27000.2()]TJ /T10 1 Tf 362.9999 0 TD 0 Tc (IPsec)Tj 258.0001 0 TD (T)Tj 57.9999 0 TD [(ransp)-3000(ort)-32000(Mo)-3000(de)]TJ /TT2 1 Tf 7.6096 0 0 7.6096 193.8946 532.3287 Tm 0 0 0 rg (Encrypted)Tj ET 1.268 w 117.799 599.97 44.389 -35.934 re 162.188 599.97 44.389 -35.934 re 206.577 599.97 44.389 -35.934 re 250.967 599.97 44.389 -35.934 re 162.188 549.239 m 162.188 534.442 l 189.667 534.442 l 227.715 534.442 m 295.356 534.442 l 295.356 549.239 l S BT 7.6096 0 0 7.6096 81.8643 574.6042 Tm (Header)Tj 0.8333 1.3889 TD (IP)Tj 4.7222 -1.3889 TD (Header)Tj 0.8333 1.3889 TD [(ESP)-15776.9(UDP)]TJ 17.5 -1.3889 TD (Data)Tj -6.1111 1.3889 TD (UDP)Tj -0.2778 -1.3889 TD (Header)Tj -4.7222 1.3889 TD (IP)Tj -0.8333 -1.3889 TD (Header)Tj ET 73.409 599.97 44.389 -35.934 re S BT /T6 1 Tf 0.12 0 0 -0.12 113.76 508.14 Tm 0 g [(Figure)-27000( )]TJ /T10 1 Tf 363.9999 0 TD [(IPsec)-32000(T)]TJ 315 0 TD [(unnel)-31999.9(M)-0.1(o)-2999.9(d)0(e)]TJ /T6 1 Tf -1027 268.9998 TD 0.0001 Tc ( )Tj 83 101.0002 TD (As)Tj 130.0001 0 TD 0 Tc (w)Tj 57.9999 0 TD 0.0001 Tc (as)Tj 109 0 TD 0 Tc (men)Tj 150 0 TD (tioned)Tj 261 0 TD (earlier)Tj 286.9999 0 TD (this)Tj 170.0001 0 TD -0.0001 Tc [(mo)-2000.2(de)]TJ 231.0001 0 TD -0.0002 Tc (is)Tj 90.9998 0 TD 0.0001 Tc (ideal)Tj 206 0 TD (for)Tj -1775.9999 100 TD 0 Tc (implemen)Tj 348.0001 0 TD [(ting)-28000.1(V)0.1(PNs)]TJ -265.0001 101 TD [(The)-22999.9(l)-0.1(ast)-23000.1(but)-24000(n)-0.1(ot)-23000(least)-23000(part)-23000.1(of)-22000(the)-24000(picture)-23000(i)0.2(s)-22000.2(a)-22999.8(k)]TJ 1711.9999 0 TD (ey)Tj -1794.9999 100 TD (managemen)Tj 428 0 TD [(t)-30000(infrastructure)]TJ 628.0001 0 TD -0.0001 Tc [(IPsec)-30000.2(can)-30000.2(only)-30000.1(w)]TJ 621.9998 0 TD 0.0001 Tc [(ork)-29999.9(if)]TJ -1677.9999 99 TD 0 Tc (the)Tj 149 0 TD (k)Tj 42.0001 0 TD (eys)Tj 147 0 TD -0.0001 Tc (in)Tj 103.0001 0 TD 0 Tc (the)Tj 148.9999 0 TD (SAs)Tj 175 0 TD (are)Tj 145 0 TD (sync)Tj 158.0001 0 TD [(hronized)-32000(and)]TJ 509.9998 0 TD 0.0001 Tc [(up)-1999.9(dated)]TJ -1577.9999 100 TD 0 Tc [(in)-26000(a)-26000(s)0.1(ecure)-25000(fashion)]TJ 727 0 TD (T)Tj 53 0 TD [(o)-25000.1(a)0.1(utomate)-26000(t)0(his)-26000(task)-26000(dieren)]TJ 1063.0001 0 TD (t)Tj -1843.0001 100 TD [(proto)-1999.9(cols)-26000(h)-0.1(a)]TJ 444.0001 0 TD (v)Tj 41.9999 0 TD [(e)-26000(b)-2000.1(een)-27000(devised)-27000.1(that)-27000(allo)]TJ 858 0 TD 26.0001 Tc (wt)Tj 116.0001 0 TD 0 Tc (w)Tj 58 0 TD [(o)-27000(p)-2000(eers)-25999.8(to)]TJ -1518.0001 99 TD [(compute)-29000(iden)]TJ 488 0 TD [(tical)-28999.9(k)]TJ 228 0 TD [(eys)-27999.9(w)-0.1(ithout)-29000.1(actually)-29000(sending)-28000(all)]TJ -716 100 TD [(the)-22000(d)0(ata)-21999.9(n)0(eeded)-22000(for)-21000(it)-23000(o)]TJ 831.0001 0 TD (v)Tj 41.9999 0 TD [(er)-20000(the)-22000(wire)-22000()]TJ 466 0 TD 21.9999 Tc [()21999.8()21999.9()]TJ 168.0001 0 TD -0.0001 Tc [(The)-22000.1(In)]TJ 238.9998 0 TD 0.0001 Tc (ter )Tj -1745.9999 100 TD 0 Tc [(net)-23000.1(Key)-22000(E)-0.1(xc)]TJ 442 0 TD [(hange)-22000.1(IKE)-21999.9(is)-22000.1(one)-23000(s)-0.1(uc)]TJ 795.0001 0 TD [(h)-23000(and)-23000(Photuris)-21000.2(is)]TJ -1237.0001 98.9998 TD (another)Tj 336 0 TD [(The)-25000(main)-25000(dierence)-24000(b)-2000(e)-0.1(t)]TJ 856 0 TD (w)Tj 58 0 TD [(een)-24999.9(t)0(hese)-25000(t)]TJ 385.0001 0 TD (w)Tj 58 0 TD [(o)-23999.8(l)-0.2(ies)]TJ -1693.0001 100 TD [(in)-20000(the)-19000(c)0(omplexit)]TJ 574 0 TD 19 Tc [(yl)19000(e)18999.9(v)]TJ 165 0 TD 0 Tc (el)Tj 117.0001 0 TD -0.0001 Tc [(IKE)-18000.1(i)-0.2(s)-19000(a)-19000.2(v)]TJ 347.9999 0 TD 0 Tc [(ery)-18000(c)0.1(omplex)-19000(proto )]TJ -1204 99 TD [(col)-30000(whic)]TJ 296 0 TD [(h)-31000(ho)]TJ 186 0 TD (w)Tj 58 0 TD (ev)Tj 79.0001 0 TD [(er)-28000(oers)-29999.9(c)-0.1(onsiderable)-29000.1(exibilit)]TJ 1113 0 TD 30 Tc [(yi)30000(n)]TJ -1732.0001 100 TD 0 Tc [(negotiating)-24000(and)-24999.9(establishing)-24999.9(SAs)]TJ 1241 0 TD 25 Tc [(I)25000(K)24999.9(Ei)25000.1(st)25000(h)25000.2(e)-1000(o)24999.8()25000.2(c)24999.8(i)25000(a)25000.2(l)]TJ -1241 100 TD 0 Tc (IETF)Tj 238.0001 0 TD (standard)Tj 409.0001 0 TD (Both)Tj 215.9999 0 TD [(proto)-2000(cols)]TJ 368.0001 0 TD (w)Tj 57.9999 0 TD (ork)Tj 155 0 TD -0.0002 Tc (in)Tj 106.9999 0 TD 0 Tc (a)Tj 79.0002 0 TD (similar)Tj -1630.0001 99 TD (v)Tj 42.0001 0 TD [(ein)-24000(b)]TJ 196.9999 0 TD [(y)-23000()0(rst)-23000(b)-0.1(uilding)-24000(an)-22999.9(encrypted)-24000(application lev)]TJ 1578.0001 0 TD (el)Tj -1817.0001 100 TD (tunnel)Tj 355.9999 0 TD (where)Tj 255.0001 0 TD (further)Tj 294.0001 0 TD (k)Tj 41.9998 0 TD 0.0001 Tc (ey)Tj 123.0001 0 TD 0 Tc (exc)Tj 116.0001 0 TD (hanges)Tj 286.9998 0 TD 0.0001 Tc (tak)Tj 116 0 TD 0 Tc (e)Tj 78.0002 0 TD (place)Tj -1667.0001 100 TD [(The)-28999.9(D)-0.1(ie Hellman)-30000(algorithm)-28000()-29000(is)-30000(used)-28999.8(to)-28999.8(mak)]TJ 1754.0001 0 TD 28.9998 Tc [(ei)28999.6(t)]TJ -1754.0001 99 TD 0 Tc [(computationally)-22000(hard)-23000(to)-23000(crac)]TJ 1045 0 TD 22.0001 Tc [(kt)22000.1(h)22000.2(e)-1999.9(k)]TJ 247 0 TD 0 Tc [(ey)-22000(computation)]TJ -1292 100.0001 TD 0.0001 Tc (Ev)Tj 99 0 TD 0 Tc [(ery)-26999.9(S)0(A)-29999.9(i)-0.1(s)-27999.9(assigned)-28000(a)-29000(lifetime)-30000(either)-29000(in)-28999.8(w)]TJ 1478.9999 0 TD [(all clo)-2000(c)]TJ 255 0 TD (k)Tj -1832.9999 99 TD [(time)-25000(or)-23000.1(in)-24999.9(v)]TJ 420.0001 0 TD [(olume)-24000(and)-23999.9(when)-25000.1(suc)]TJ 749.9999 0 TD [(h)-24000(a)-24000(lifetime)-25000(expires)]TJ -1170 100 TD [(the)-31000(k)]TJ 188.0001 0 TD [(ey)-31000(managemen)]TJ 540.0001 0 TD [(t)-29999.9(d)0(aemon)-30000(renegotiates)-29000(with)-32000(the)]TJ -728.0001 100 TD [(p)-2000.1(e)0(er)-27000(c)-0.1(reating)-27000(new)-28000(SAs)-26999.9(with)-28999.9(fresh)-26999.9(k)]TJ 1296 0 TD (eys)Tj /T10 1 Tf -1296 224 TD ( )Tj 292.0001 0 TD [(Op)-3000.1(enBSD)-31000(IPsec)]TJ /T6 1 Tf -292.0001 157 TD [(Op)-2000.1(enBSDs)]TJ 453 0 TD [(IPsec)-32000(stac)]TJ 368 0 TD 31.9999 Tc (kw)Tj 134.0001 0 TD -0.0002 Tc (as)Tj 107 0 TD 0 Tc (written)Tj 295.9999 0 TD (b)Tj 44 0 TD (y)Tj 77.0001 0 TD [(John)-32000(Ioan )]TJ -1479.0001 99 TD [(nidis)-24000(and)-23000(Angelos)-22000(Kerom)]TJ 903 0 TD [(ytis)-22000()]TJ 260 0 TD [()-24000(and)-23000.1(later)-23000(e)0(nhance )]TJ -1163 100 TD (men)Tj 149.9999 0 TD [(ts)-26000(and)-26000(xes)-25999.9(ha)]TJ 523.0001 0 TD (v)Tj 42 0 TD 26 Tc [(eb)24000.1(e)26000(e)25999.9(np)25999.8(r)26000.1(o)]TJ 376 0 TD 0 Tc [(vided)-26000(b)]TJ 266 0 TD [(y)-26000(N)0.2(iels)-26000(Pro)]TJ 404.0001 0 TD (v)Tj 41.9998 0 TD (os)Tj -1802.9999 100 TD [(and)-26999.9(N)-0.1(iklas)-27000(H)0(allqvist)]TJ 801 0 TD [(The)-27000(core)-26000(is)-27000(stable)-27000(and)-28000(in)-26999.8(pro )]TJ -801 99.0001 TD (duction)Tj 311 0 TD (use)Tj 154 0 TD (securing)Tj 334 0 TD (data)Tj 200.0001 0 TD -0.0001 Tc (in)Tj 107 0 TD (man)Tj 155 0 TD 0 Tc (y)Tj 82 0 TD (places)Tj 256 0 TD -0.0001 Tc (all)Tj 126 0 TD 0 Tc (o)Tj 39.9998 0 TD (v)Tj 42 0 TD 0.0002 Tc (er)Tj -1806.9999 100 TD 0 Tc [(the)-28000(w)]TJ 201.0001 0 TD [(orld)-27000(a)0.1(s)-27000.1(i)0.1(t)-28000(d)0(o)-2000(e)0(s)-28000(n)0(ot)-27999.9(suer)-26999.9(from)-28000.1(US)-27999.8(exp)-1999.8(o)-0.2(rt)-27000.2(reg )]TJ -201.0001 100 TD (ulations)Tj 377 0 TD (A)Tj 100 0 TD (n)Tj 44 0 TD (um)Tj 113 0 TD 2 Tc [(be)1999.9(r)]TJ 155 0 TD 0.0001 Tc (of)Tj 105 0 TD 0 Tc (companies)Tj 437 0 TD (agencies)Tj 358.9999 0 TD (insti )Tj -1689.9999 99.0001 TD (tutions)Tj 315 0 TD (and)Tj 169 0 TD (individuals)Tj 431 0 TD (are)Tj 146 0 TD (using)Tj 225.0001 0 TD -0.0001 Tc (the)Tj 151 0 TD [(co)-2000.1(de)]TJ 225 0 TD 0 Tc (a)Tj 76.9998 0 TD 0.0001 Tc (fact)Tj 286.0002 -5317 TD 0 Tc [(that)-25000(has)-24000.2(help)-2000(e)0(d)-26000.2(u)0(s)-24999.8(s)-0.2(ignican)]TJ 1024.9998 0 TD [(tly)-24000(i)0(n)-25000()0.2(nding)-25000(and)-24000(xing)]TJ -1024.9998 100 TD [(bugs)-27000(and)-28000(in)-28000(motiv)]TJ 681 0 TD [(ating)-27000(further)-27000.2(dev)]TJ 616 0 TD (elopmen)Tj 298 0 TD (t)Tj -1512.0002 100 TD (Recen)Tj 216.0002 0 TD (tly)Tj 92 0 TD [()-24999.8(t)-0.2(he)-25000(API)-23999.8(used)-24999.8(to)-24000(setup)-24999.8(and)-24999.8(main)]TJ 1202 0 TD -0.0001 Tc [(tain)-24000.6(the)]TJ -1593 100 TD 0 Tc [(SA)-25000(database)-22999.8(w)]TJ 534 0 TD -0.0001 Tc [(as)-24000.3(switc)]TJ 282 0 TD 0 Tc [(hed)-23999.8(to)-25000.2(the)-25000(standard)-23000(PF)]TJ ET q 3 0 0 -0.48 515.028 673.608 cm /Im1 Do Q BT 0.12 0 0 -0.12 518.04 673.14 Tm (KEY)Tj -1692 99 TD -0.0001 Tc ( \012)Tj 106 0 TD 0 Tc ()Tj 146.9998 0 TD -0.0001 Tc (This)Tj 212 0 TD 0.0001 Tc (API)Tj 197.0002 0 TD 0 Tc (is)Tj 105 0 TD (m)Tj 67 0 TD (uc)Tj 80.9998 0 TD (h)Tj 95.0002 0 TD (more)Tj 228.9998 0 TD (exible)Tj 306.0002 0 TD -0.0002 Tc (than)Tj 215 0 TD 0 Tc (the)Tj -1760 100 TD -0.0001 Tc [(old)-31000.3(P)-0.1(F)]TJ ET q 3 0 0 -0.48 345.948 649.728 cm /Im1 Do Q BT 0.12 0 0 -0.12 348.96 649.26 Tm 0 Tc [(ENCAP)-31000(in)]TJ 396.0002 0 TD (terface)Tj 313 0 TD (Av)Tj 101 0 TD [(ailable)-32000(algorithms)-30000(for)]TJ -1093 100 TD (encryption)Tj 430 0 TD (are)Tj 157 0 TD -0.0001 Tc (DES)Tj 211 0 TD ( )Tj 106 0 TD -0.0002 Tc ()Tj 95 0 TD 0 Tc (\012DES)Tj 275.9998 0 TD (Cast )Tj 391.0002 0 TD (Blo)Tj 122 0 TD (w )Tj -1788 99 TD (sh)Tj 161 0 TD (\012\015)Tj 190.9998 0 TD (and)Tj 170.0002 0 TD [(Skip)-5000(jac)]TJ 265.9998 0 TD (k)Tj 80.0002 0 TD [(supp)-2000.2(o)0.2(rt)]TJ 348 0 TD (for)Tj 135.9998 0 TD 0.0001 Tc (the)Tj 152.0002 0 TD -0.0001 Tc (latter)Tj 260 0 TD 0 Tc (de )Tj -1764 100 TD (spite)Tj 219.9998 0 TD 0.0001 Tc (its)Tj 136.0002 0 TD 0 Tc (kno)Tj 130 0 TD (wn)Tj 153.9998 0 TD (w)Tj 58.0002 0 TD (eaknesses)Tj 416.9998 0 TD (w)Tj 58.0002 0 TD -0.0002 Tc (as)Tj 122 0 TD 0 Tc (added)Tj 266 0 TD (after)Tj 216.9995 0 TD 0.0003 Tc (re )Tj -1777.9995 100 TD 0 Tc [(quests)-30000(b)]TJ 299 0 TD 30 Tc [(yU)30000(S)-1000(G)30000.2(o)]TJ 318 0 TD 0 Tc (v)Tj 42 0 TD (ernmen)Tj 265.9998 0 TD [(t)-29000.2(a)0.2(gencies)-29000(using)-29000(our)-30000(IPsec)]TJ -924.9998 99 TD -0.0001 Tc (stac)Tj 142 0 TD 0 Tc (k)Tj 158.9998 0 TD (One w)Tj 234.0002 0 TD (a)Tj 40 0 TD (y)Tj 77.9998 0 TD 0.0001 Tc (hash)Tj 202.0002 0 TD 0 Tc (algorithms)Tj 419 0 TD (are)Tj 147 0 TD (MD\015)Tj 242 0 TD (SHA)Tj -1663 100 TD [(and)-24000(R)-0.2(IPEMD)-22999.8()-0.2( )]TJ 756.9998 0 TD 25.0002 Tc [( )25000.2()]TJ 131 0 TD 24.0002 Tc [()24000.4()]TJ 130.0002 0 TD -0.0002 Tc ()Tj 81.9998 0 TD 0 Tc (F)Tj 47.0002 0 TD -0.0002 Tc [(or)-24000.4(k)]TJ 140.9998 0 TD 0 Tc [(ey)-24000(managemen)]TJ 533.0002 0 TD -0.0005 Tc (t)Tj -1821 98.9995 TD 0 Tc (t)Tj 30 0 TD (w)Tj 57.9998 0 TD (o)Tj 81.0002 0 TD (daemons)Tj 355 0 TD (are)Tj 150.9998 0 TD (a)Tj 40 0 TD (v)Tj 39.0002 0 TD (ailable)Tj /T7 1 Tf 301 0 TD (isakmp)Tj 244.9998 0 TD (d)Tj /T6 1 Tf 84.0002 0 TD (implemen)Tj 348 0 TD (ting)Tj -1732 100 TD -0.0001 Tc (IKE)Tj 187 0 TD ( )Tj 106 0 TD 0 Tc ()Tj 57.9998 0 TD 0.0001 Tc ( )Tj 142.0002 0 TD 0 Tc ( )Tj 82.9998 0 TD ()Tj 59.0002 0 TD (and)Tj /T7 1 Tf 169 0 TD (photurisd)Tj /T6 1 Tf 371.9998 0 TD (implemen)Tj 348.0002 0 TD (ting)Tj 178.9995 0 TD 0.0001 Tc (Pho )Tj -1702.9995 100 TD 0 Tc [(turis)-27000(\012)]TJ 300 0 TD ()Tj /T10 1 Tf -300 219.0005 TD ( )Tj 292 0 TD (F)Tj 51.9998 0 TD [(uture)-32000(W)]TJ 349.0002 0 TD -0.0001 Tc [(ork)-32000.1(in)-31000.3(IPsec)]TJ /T6 1 Tf -693 155 TD 0 Tc [(Our)-31000(IPsec)-31000.2(implemen)]TJ 748 0 TD (tation)Tj 249 0 TD [(is)-31000(under)-32000(c)0(onstan)]TJ 603 0 TD [(t)-31000(dev)]TJ 188 0 TD (el )Tj -1788 100 TD (opmen)Tj 237.9998 0 TD [(t)-22000.2(and)-21000(impro)]TJ 420.0002 0 TD (v)Tj 41.9998 0 TD 0.0001 Tc (emen)Tj 187.0002 0 TD 0 Tc [(t)-22000(as)-21000.2(there)-21000(remain)-21000(a)-21000(n)]TJ 757 0 TD -0.0005 Tc (um)Tj 113 0 TD 1.9995 Tc [(be)1999(r)]TJ -1757 98.9998 TD 0 Tc [(of)-27999.8(unresolv)]TJ 397 0 TD [(ed)-26000(issues)]TJ /T8 1 Tf -314.0002 186 TD ( )Tj /T6 1 Tf 83.0002 0 TD -0.0001 Tc (Our)Tj 177.9998 0 TD 0.0001 Tc (IPv)Tj 206.0002 0 TD -0.0001 Tc (stac)Tj 142 0 TD 0 Tc (k)Tj 76.9998 0 TD 0.0002 Tc (is)Tj 90.0002 0 TD 0 Tc (not)Tj 153.9998 0 TD (y)Tj 42.0002 0 TD (et)Tj 103 0 TD -0.0002 Tc (in)Tj 66.9998 0 TD 0 Tc (tegrated)Tj 334.0002 0 TD (with)Tj 195.9995 0 TD 0.0003 Tc (our)Tj -1588.9995 100 TD 0 Tc [(IPsec)-27000(implemen)]TJ 569 0 TD (tation)Tj /T8 1 Tf -652.0002 169 TD ( )Tj /T6 1 Tf 83.0002 0 TD (W)Tj 78 0 TD 24 Tc (ew)Tj 118.9998 0 TD 0.0002 Tc (an)Tj 86.0002 0 TD 0 Tc [(t)-23000(a)-22000(more)-23000(exible)-24000(p)-2000.2(ossibly)-22999.8(u)-0.2(nied)-24000(p)-1999.5(o)-0.5(licy)]TJ -283 99 TD (mec)Tj 140.9998 0 TD (hanism)Tj 336.0002 0 TD (In)Tj 108.9998 0 TD (particular)Tj 414.0002 0 TD (w)Tj 58 0 TD (e)Tj 70 0 TD [(are)-31999.8(lo)-2000(oking)-32000(in)]TJ 507 0 TD (to)Tj -1635 100 TD (merging)Tj 327 0 TD (routing)Tj 325 0 TD (securit)Tj 239 0 TD (y)Tj 79 0 TD 0.0001 Tc [(p)-1999.9(o)0.3(licy)]TJ 210 0 TD 0 Tc ()Tj 61 0 TD (and)Tj 170 0 TD -0.0003 Tc [(proto)-2000.8(c)-0.3(ol)]TJ -1411 100 TD 0 Tc [(blo)-2000(c)]TJ 147.9998 0 TD [(k)-27000.2(l)0.2(o)-2000(okups)]TJ /T8 1 Tf -231 169 TD ( )Tj /T6 1 Tf 83.0002 0 TD (Dev)Tj 141.9998 0 TD 0.0001 Tc (elop)Tj 221.0002 0 TD 0 Tc (or)Tj 146.9998 0 TD -0.0001 Tc [(b)-2000.3(orro)]TJ 196.0002 0 TD 0 Tc (w)Tj 130.9998 0 TD (a)Tj 115.0002 0 TD 2 Tc [(po)2000(l)2000.2(i)1999.8(c)2000(y)]TJ 290 0 TD 0 Tc (API)Tj 244.9995 0 TD 0.0001 Tc (rather)Tj -1486.9995 99 TD 0 Tc (than)Tj 210.9998 0 TD 0.0001 Tc (use)Tj 161 0 TD -0.0001 Tc (priv)Tj 141.0002 0 TD (ate)Tj 156 0 TD 0 Tc (extensions)Tj 417.9998 0 TD 0.0002 Tc (to)Tj 119.0002 0 TD 0 Tc (PF)Tj ET q 3 0 0 -0.48 493.548 350.688 cm /Im1 Do Q BT 0.12 0 0 -0.12 496.56 350.22 Tm (KEY)Tj 228 0 TD -0.0003 Tc (and)Tj -1575 100 TD 0 Tc (PF)Tj ET q 3 0 0 -0.48 348.828 338.688 cm /Im1 Do Q BT 0.12 0 0 -0.12 351.84 338.22 Tm (R)Tj 59.0002 0 TD (OUTE)Tj /T8 1 Tf -283.0002 169 TD ( )Tj /T7 1 Tf 83.0002 0 TD (isakmp)Tj 245 0 TD (d)Tj /T6 1 Tf 75 0 TD -0.0001 Tc [(has)-30999.9(n)-0.3(ot)-31000.1(y)]TJ 345 0 TD 0.0001 Tc [(et)-30999.7(co)]TJ 177 0 TD 0 Tc (v)Tj 41.9998 0 TD [(ered)-30000(all)-30999.8(m)-0.2(andatory)-30000(r)-0.5(e )]TJ -883.9998 100 TD (quiremen)Tj 333 0 TD [(ts)-27000(in)-28000(the)-28000(R)0(F)]TJ 444.9998 0 TD 0.0001 Tc (Cs)Tj /T8 1 Tf -861 169 TD 0 Tc ( )Tj /T6 1 Tf 83.0002 0 TD [(A)-22000(D)0.2(NSSEC)-21000()-22000(implemen)]TJ 896.9998 0 TD [(tation)-21999.8(and)-21000.2(i)0.5(n)]TJ 484.0002 0 TD -0.0001 Tc (tegration)Tj -1381 99 TD -0.0002 Tc (in)Tj /T7 1 Tf 91.9998 0 TD 0 Tc (isakmp)Tj 245 0 TD (d)Tj /T6 1 Tf 65.0002 0 TD (and)Tj /T7 1 Tf 156.9998 0 TD (photurisd)Tj /T6 1 Tf 335.0002 0 TD [()-24000(w)0(ill)-23000.2(b)-2000(e)-23000(n)0.2(eeded)-22000(for)-22000.5(o)0.5(p )]TJ -894 100 TD [(p)-1999.8(o)-0.2(rtunistic)-27999.8(e)0(ncryption)]TJ /T8 1 Tf -83.0002 169.0002 TD ( )Tj /T7 1 Tf 83.0002 0 TD (isakmp)Tj 245 0 TD (d)Tj /T6 1 Tf 76 0 TD (and)Tj /T7 1 Tf 165.9998 0 TD (photurisd)Tj /T6 1 Tf 369.0002 0 TD -0.0001 Tc [(are)-30999.9(n)-0.3(ot)]TJ 295 0 TD 0.0001 Tc (link)Tj 133.9998 0 TD 0 Tc (ed)Tj 116.0002 0 TD (with)Tj /T7 1 Tf 193 0 TD (lib)Tj -1594 98.9999 TD (ssl)Tj /T6 1 Tf 116.9998 0 TD [(so)-26000(they)-28000(will)-28000(n)-0.2(ot)-26999.8(automatically)-26000.2(s)0.2(upp)-2000(ort)-26999.5(RSA)]TJ -116.9998 100 TD [(when)-27999.8(an)-27000(RSA supp)-2000.2(orting)]TJ /T7 1 Tf 946.9998 0 TD (libssl)Tj /T6 1 Tf 202 0 TD -0.0001 Tc [(is)-28000.3(installed)]TJ /T8 1 Tf -1232 169 TD 0 Tc ( )Tj /T6 1 Tf 83.0002 0 TD (W)Tj 78 0 TD (e)Tj 93 0 TD -0.0002 Tc (do)Tj 144 0 TD -0.0001 Tc (not)Tj 175.9998 0 TD 0 Tc (curren)Tj 230.0002 0 TD (tly)Tj 153.9998 0 TD 0.0002 Tc (do)Tj 144.0002 0 TD 0 Tc (on demand)Tj 457 0 TD (k)Tj 42 0 TD (eying)Tj -1518 100 TD (a)Tj 121.9998 0 TD (facilit)Tj 203.0002 0 TD (y)Tj 92 0 TD (a)Tj 40 0 TD (v)Tj 39 0 TD (ailable)Tj 281.9998 0 TD 0.0002 Tc (in)Tj 117.0002 0 TD -0.0001 Tc (the)Tj 163.9998 0 TD 0.0001 Tc (past)Tj 200 0 TD 0 Tc (through)Tj 335.0002 0 TD (the)Tj -1594 99 TD (PF)Tj ET q 3 0 0 -0.48 348.828 173.928 cm /Im1 Do Q BT 0.12 0 0 -0.12 351.84 173.46 Tm [(ENCAP)-26999.8(API)]TJ /T8 1 Tf -224 169 TD ( )Tj /T6 1 Tf 83.0002 0 TD (Finally)Tj 247.9998 0 TD 30.0002 Tc (w)Tj 111.0002 0 TD 30 Tc [(ei)30000.2(n)]TJ 134 0 TD 0 Tc [(tend)-29999.8(to)-30000.2(supp)-1999.8(ort)-29000(some)-30000(application)]TJ -493 100 TD [(API)-32000(f)0(or)-31000(requesting)-30999.8(securit)]TJ 955 0 TD [(y)-31000(a)0.2(nd)-31999.8(p)-2000.2(o)0.2(ssibly)-32000(other)]TJ -955 100 TD (services)Tj 336.9998 0 TD [(With)-28000(that)-29000(in)-28000(place)-27999.8(w)]TJ 786 0 TD 27 Tc [(ei)27000(n)]TJ 131.0002 0 TD 0 Tc [(tend)-28000(to)-28000(ha)]TJ 377 0 TD (v)Tj 42 0 TD (e)Tj -1673 99 TD (all)Tj 128.9998 0 TD (net)Tj 113 0 TD (w)Tj 58.0002 0 TD (orking)Tj 269 0 TD (applications)Tj 475 0 TD (tak)Tj 115.9998 0 TD (e)Tj 77 0 TD 0.0001 Tc (adv)Tj 127.0002 0 TD 0 Tc (an)Tj 86 0 TD 0.0001 Tc (tage)Tj 192 0 TD 0 Tc (of)Tj -1642 100 TD (IPsec)Tj -83.0002 186.0001 TD 0.0001 Tc (All)Tj 149 0 TD 0.0002 Tc (of)Tj 107 0 TD 0 Tc (these)Tj 225 0 TD (are)Tj 151 0 TD 0.0001 Tc (impro)Tj 211 0 TD 0 Tc (v)Tj 42.0002 0 TD (emen)Tj 187 0 TD -0.0002 Tc (ts)Tj 104 0 TD 0.0001 Tc (that)Tj 191.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD (e)Tj 77 0 TD (w)Tj 58 0 TD (an)Tj 85.9995 0 TD (t)Tj 71.0005 0 TD (to)Tj -1801 99.0001 TD [(address)-25999.8(in)-28000.2(the)-28000(time frame)-27000.2(f)0(or)-28000.2(the)-27000(n)-0.2(ext)-27999.8(release)]TJ ET endstream endobj 21 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /TT2 22 0 R /T6 9 0 R /T7 10 0 R /T8 11 0 R /T10 18 0 R >> /XObject << /Im1 23 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 25 0 obj << /Length 20449 >> stream BT /T5 1 Tf 0.12 0 0 -0.12 72 709.14 Tm 0 g /GS1 gs 0 Tc 0 Tw ()Tj 238.0001 0 TD [(Kerb)-3000.1(eros)]TJ /T6 1 Tf -155.0001 215 TD 0.0001 Tc [(In)-28999.9(a)-27999.8(n)0(et)]TJ 288 0 TD 0 Tc (w)Tj 58 0 TD (ork)Tj 117 0 TD -0.0001 Tc [(ed)-27000.2(en)]TJ 191 0 TD 0 Tc (vironmen)Tj 338 0 TD [(t)-28000(it)-28999.9(is)-29000(v)]TJ 294 0 TD [(ery)-27000(imp)-2000.2(ortan)]TJ 474.0001 0 TD (t)Tj -1843.0001 98.9995 TD [(to)-24000(b)-1999.9(e)-24000.1(able)-24000.1(to)-24000(authen)]TJ 724 0 TD [(ticate)-23000.1(users)-23000(i)0.2(n)-25000.2(a)-22999.9(secure)-23000(w)]TJ 894.0001 0 TD (a)Tj 39.9998 0 TD 23.0002 Tc (yo)Tj 107 0 TD 0 Tc (v)Tj 42 0 TD 0.0002 Tc (er)Tj -1806.9999 100 TD 0 Tc [(insecure)-30000.1(n)0.1(et)]TJ 435 0 TD (w)Tj 58 0 TD (orks)Tj 218 0 TD [(Kerb)-2000(eros)-29000(is)-30000(a)-30000(n)0(et)]TJ 628 0 TD (w)Tj 58 0 TD [(ork)-28999.8(authen)]TJ 395.0001 0 TD (ti )Tj -1792.0001 99.0005 TD (cation)Tj 256 0 TD [(proto)-2000(col)]TJ 332 0 TD (using)Tj 225 0 TD (a)Tj 76 0 TD (trusted)Tj 293 0 TD (third part)Tj 358.9999 0 TD (y)Tj 78.0002 0 TD -0.0002 Tc (to)Tj 107.9998 0 TD 0.0001 Tc (pro )Tj -1726.9999 100 TD 0 Tc [(vide)-27999.9(authen)]TJ 425.0001 0 TD [(tication)-26999.9(and)-27000(basic)-27000(session k)]TJ 989.9999 0 TD -0.0002 Tc [(ey)-26000.4(exc)]TJ 223.0001 0 TD 0 Tc (hange)Tj -1555.0001 105 TD [(Kerb)-2000.1(eros)]TJ 364.0001 0 TD -0.0001 Tc (is)Tj 94 0 TD 0 Tc (built)Tj 207.9999 0 TD (around)Tj 292 0 TD (a)Tj 79 0 TD (cen)Tj 118 0 TD (tral)Tj 167.0001 0 TD (k)Tj 41.9999 0 TD (ey)Tj 117.9999 0 TD (distribu )Tj -1564.9999 99 TD [(tion)-25000.1(cen)]TJ 286 0 TD [(ter)-24000(KDC)-26000(w)-0.1(hic)]TJ 568 0 TD 25.0001 Tc (hk)Tj 113 0 TD 0 Tc [(eeps)-23999.9(a)-25000.1(database)-23000(of)-25000(clien)]TJ 843.0001 0 TD (ts)Tj -1810.0001 100 TD [(and)-18999.9(s)0(erv)]TJ 298.0001 0 TD [(ers)-18000.1()0.1(called)-19000.1(p)0.1(rincipals)-19999.9(a)-0.1(nd)-19000(their)-20000(priv)]TJ 1269 0 TD -0.0001 Tc [(ate)-19000.3(k)]TJ 171.9998 0 TD 0 Tc (eys)Tj -1738.9999 100 TD [(Encryption)-21999.9(in)-23000(Kerb)-2000.1(eros)-21000(is)-21999.9(based)-23000(o)0.1(n)-21999.9(D)-0.1(ES)-22999.8( )]TJ 1579.0001 0 TD -0.0002 Tc ()Tj 82 0 TD 0 Tc (When)Tj -1661.0001 99 TD (the)Tj 149.9999 0 TD 0.0001 Tc (clien)Tj 164.0001 0 TD 0 Tc (t)Tj 66 0 TD (w)Tj 58.0001 0 TD -0.0001 Tc (an)Tj 85.9999 0 TD 0 Tc (ts)Tj 99 0 TD (to)Tj 108.0001 0 TD -0.0001 Tc (use)Tj 150 0 TD (some)Tj 214.9999 0 TD 0 Tc (service)Tj 277 0 TD (it)Tj 90.0001 0 TD (issues)Tj 238.9998 0 TD (a)Tj 76 0 TD 0.0001 Tc (re )Tj -1777.9999 100 TD 0 Tc [(quest)-28999.9(t)0.1(o)-29000.1(t)0.1(he)-30000.1(KDC)-28999.9(f)0(or)-27999.9(a)-29000(tic)]TJ 975.0001 0 TD (k)Tj 41.9999 0 TD [(et)-29000(for)-28000.1(that)-30000(service)]TJ 715.0001 0 TD (The)Tj -1732.0001 99 TD (serv)Tj 145.0001 0 TD [(er)-23999.9(returns)-26000(a)-24999.9(message)-25000(encrypted)-26000(with)-27000.2(t)0.2(he)-26000(clien)]TJ 1642 0 TD (ts)Tj -1787.0001 100 TD (priv)Tj 141.0001 0 TD -0.0001 Tc (ate)Tj 151 0 TD 0 Tc (k)Tj 41.9999 0 TD (ey)Tj 74 0 TD ()Tj 66 0 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (taining)Tj 292.9999 0 TD (three)Tj 225 0 TD (parts)Tj 270 0 TD (a)Tj 81.9999 0 TD (session)Tj 286 0 TD (k)Tj 42 0 TD (ey)Tj -1794.9999 100 TD 0.0001 Tc (that)Tj 185.0001 0 TD 0 Tc [(can)-32000(b)-2000(e)]TJ 274.9999 0 TD (used)Tj 195 0 TD [(for)-31999.9(encryption)]TJ 550.0001 0 TD 1.9998 Tc [(be)1999.7(t)]TJ 114.9999 0 TD 0 Tc (w)Tj 58 0 TD -0.0001 Tc (een)Tj 153.0001 0 TD (the)Tj 148 0 TD 0 Tc (clien)Tj 164 0 TD (t)Tj -1843.0001 99 TD [(and)-20000(t)0.1(he)-20999.9(serv)]TJ 435 0 TD [(er)-19000.1(a)-19999.9(timestamp)-22000.1(and)-20000(a)-19999.9(tic)]TJ 908.0001 0 TD (k)Tj 41.9999 0 TD (et)Tj 126.0001 0 TD [(The)-20000(tic)]TJ 252.9998 0 TD (k)Tj 42.0002 0 TD (et)Tj -1806.0001 100 TD [(is)-30999.9(encrypted)-31000(with)-32000(t)0.1(he)-31999.9(priv)]TJ 957 0 TD 0.0001 Tc [(ate)-29999.8(k)]TJ 183 0 TD 0 Tc [(ey)-31000(of)-31000(the)-32000(serv)]TJ 502.0001 0 TD 0.0001 Tc [(er)-28999.7(and)]TJ -1642.0001 100 TD (con)Tj 123.0001 0 TD 0 Tc (tains)Tj 212 0 TD (the)Tj 152.9999 0 TD (name)Tj 231.0001 0 TD -0.0001 Tc (of)Tj 103.9999 0 TD 0 Tc (the)Tj 153 0 TD (clien)Tj 164 0 TD (t)Tj 95 0 TD (a)Tj 79 0 TD (timestamp)Tj 446.0001 0 TD (the)Tj -1760.0001 99 TD (clien)Tj 164.0001 0 TD -0.0001 Tc (ts)Tj 100.9999 0 TD 0.0001 Tc (net)Tj 112.9999 0 TD 0 Tc (w)Tj 58.0001 0 TD (ork)Tj 153 0 TD (address)Tj 330 0 TD (lifetime)Tj 306 0 TD (of)Tj 103 0 TD (the)Tj 151.0001 0 TD -0.0001 Tc (tic)Tj 90 0 TD 0 Tc (k)Tj 42 0 TD (et)Tj 129.9998 0 TD 0.0001 Tc (and)Tj -1740.9999 100 TD 0 Tc [(the)-31999.9(s)-0.1(ame)-29999.9(s)-0.1(ession)-31000(k)]TJ 678.0001 0 TD [(ey)-30000(that)-32000(the)-32000(c)0(lien)]TJ 605.9998 0 TD [(t)-31000.1(obtained)]TJ 448.0002 0 TD (The)Tj -1732.0001 98.9998 TD (tic)Tj 90 0 TD (k)Tj 42.0001 0 TD [(et)-22000(can)-22000.1(b)-1999.9(e)-23000(p)0(assed)-21999.9(t)0(o)-22000(the)-23000(serv)]TJ 983.9999 0 TD [(er)-21000.1(for)-20999.9(authen)]TJ 459.0001 0 TD (tication)Tj -1492.0001 105 TD [(Kerb)-2000.1(eros)-25000.1( )-27000(w)]TJ 568 0 TD [(as)-26000(originally)-25999.9(dev)]TJ 593 0 TD [(elop)-2000(ed)-27000(b)]TJ 304.0001 0 TD 0.0001 Tc [(y)-26999.9(p)0.3(ro)-4999.7(ject)]TJ -1548.0001 100 TD 0 Tc (A)Tj 60.0001 0 TD [(thena)-22000.1(at)-21999.9(MIT)-21999.9(but)-22000(w)]TJ 735.9999 0 TD [(as)-21000(not)-21999.9(exp)-2000(ortable)-21000(f)0.2(rom)-21000.2(the)-23000(US)]TJ -796 99 TD 0.0001 Tc (due)Tj 167.0001 0 TD -0.0001 Tc (to)Tj 110.9999 0 TD 0 Tc (legal)Tj 204.0001 0 TD (restrictions)Tj 492.0001 0 TD (The)Tj 179.9999 0 TD (cryptographic)Tj 539.0001 0 TD (func )Tj -1693.0001 100 TD (tionalit)Tj 261 0 TD (y)Tj 83.0001 0 TD (w)Tj 57.9999 0 TD 0.0001 Tc (as)Tj 113 0 TD 0 Tc (remo)Tj 179.0001 0 TD (v)Tj 41.9999 0 TD (ed)Tj 121 0 TD (and)Tj 173.0001 0 TD (a)Tj 81 0 TD (Bones)Tj 339 0 TD (distribution)Tj -1450.0001 100 TD (w)Tj 58 0 TD -0.0001 Tc (as)Tj 113 0 TD 0 Tc (created)Tj 302 0 TD (and)Tj 172 0 TD [(exp)-2000(orted)]TJ 412 0 TD (The)Tj 181 0 TD (cryptographic)Tj 539.9999 0 TD 0.0001 Tc (in )Tj -1777.9999 99.0002 TD 0 Tc [(terfaces)-29000(w)]TJ 363.0001 0 TD [(ere)-29000(a)-0.1(dded)-30000(bac)]TJ 505.9999 0 TD 30.0001 Tc (kb)Tj 118.0001 0 TD 29.9999 Tc [(yE)29999.8(r)30000(i)29999.8(c)1000(Y)]TJ 307.9999 0 TD 0 Tc [(oung)-30000.2(a)0.2(nd)-30000(KTH)]TJ -1295 100 TD (The)Tj 214 0 TD -0.0001 Tc (Ro)Tj 101 0 TD 0 Tc (y)Tj 42.0001 0 TD -0.0001 Tc (al)Tj 102.9999 0 TD 0 Tc (Institute)Tj 350 0 TD (of)Tj 106 0 TD (T)Tj 53 0 TD 0.0001 Tc (ec)Tj 72 0 TD 0 Tc (hnology)Tj 322 0 TD 0.0001 Tc (in)Tj 107.9999 0 TD [(Sto)-1999.9(c)]TJ 157 0 TD 0 Tc (kholm)Tj -1627.9999 100 TD (Sw)Tj 104.0001 0 TD [(eden)-25999.9(m)-0.1(ain)]TJ 401.9999 0 TD [(tained)-25000(the)-26000(co)-2000(de)-25000.1(outside)-26000.1(the)-26000(USA)-26000.2(The)]TJ -506 99 TD [(Kerb)-1999.9(e)-0.1(ros)-20999.9(i)-0.1(mplemen)]TJ 697.0001 0 TD [(tation)-24000(in)-23000.1(Op)-2000.1(enBSD)-24000.1(is)-23000(kth krb)]TJ -697.0001 100 TD [(proto)-1999.9(col)-27000(v)]TJ 368 0 TD [(ersion)-26000()-27999.9(and)-27000.1(is)-28000(used)-28000(i)0.1(n)-28000(a)-27000(n)]TJ 978 0 TD 0.0001 Tc (um)Tj 113.0001 0 TD 0 Tc [(b)-2000(e)0(r)-28000(o)0(f)-28000(u)0.2(tili )]TJ -1459.0001 99 TD (ties)Tj /T10 1 Tf 0 243 TD ( )Tj 292.0001 0 TD (Practical)Tj 403.9999 0 TD (Uses)Tj /T6 1 Tf -696 163 TD [(The)-21000.1(s)0.1(implest)-21000(use)-20000(of)-21000(Kerb)-2000(eros)-18999.9(is)-21000(to)-19999.9(authen)]TJ 1469.9999 0 TD [(ticate)-21000(users)]TJ -1469.9999 98.9998 TD [(lo)-2000(cally)-18000(o)0.1(n)-19000(a)-19000.1(w)]TJ 480 0 TD [(orkstation)-32000(The)]TJ /T7 1 Tf 586 0 TD 0.0001 Tc (lo)Tj 59 0 TD 0 Tc [(gin)-22000(xdm)]TJ /T6 1 Tf 351.9999 0 TD (and)Tj /T7 1 Tf 153.0002 0 TD -0.0002 Tc (su)Tj /T6 1 Tf 96.9998 0 TD 0.0001 Tc (pro )Tj -1726.9999 100 TD 0 Tc [(grams)-21000(i)-0.1(n)-23000(O)0(p)-1999.9(e)0(nBSD)-23000.1(ha)]TJ 805 0 TD (v)Tj 42.0001 0 TD [(e)-21000(t)0(he)-23000.1(necessary)-21000(co)-2000(de)-22000.2(to)-22000(allo)]TJ 969 0 TD (w)Tj -1816.0001 99.0001 TD [(Kerb)-1999.9(e)-0.1(ros)-17999.9(a)-0.1(uthen)]TJ 593 0 TD (tication)Tj 334 0 TD 20.0001 Tc [(T)20000(h)20000.2(en)20000(e)20000.2(x)20000.1(ts)20000.1(t)20000.2(e)20000(pi)20000.1(st)20000.3(op)20000.3(r)19999.9(o)]TJ 798.9999 0 TD -0.0001 Tc (vide)Tj -1725.9999 100 TD 0 Tc (authen)Tj 247.0001 0 TD (tication)Tj 316.9999 0 TD 0.0001 Tc (for)Tj 140 0 TD 0 Tc (net)Tj 113 0 TD (w)Tj 58.0001 0 TD (ork)Tj 157.9999 0 TD [(proto)-2000(cols)]TJ 427.9999 0 TD 0.0001 Tc (The)Tj /T7 1 Tf 184 0 TD 0 Tc (rlo)Tj 94 0 TD 0.0001 Tc (gin)Tj -1738.9999 100 TD (rsh)Tj /T6 1 Tf 166.0001 0 TD 0 Tc (and)Tj /T7 1 Tf 163 0 TD (telnet)Tj /T6 1 Tf 228.9999 0 TD [(programs)-27000.1(ha)]TJ 453 0 TD (v)Tj 41.9999 0 TD [(e)-28000.2(b)-1999.9(een)-30000(m)0(o)-2000(d)0(ied)-29000(to)-28999.8(use)]TJ -1052.9999 99 TD [(Kerb)-1999.9(e)-0.1(ros)]TJ 386 0 TD [(In)-26999.9(addition)-28000(t)0(o)-27000.1(t)0(hat)-28000(they)-26999.9(can)-27000(use)-26999.8(the)-27999.8(ses )]TJ -386 100 TD (sion)Tj 181 0 TD (k)Tj 42.0001 0 TD (ey)Tj 74 0 TD ()Tj 63 0 TD (obtained)Tj 351.9999 0 TD (in)Tj 107 0 TD -0.0001 Tc (the)Tj 154 0 TD 0 Tc (authen)Tj 247 0 TD (tication)Tj 313.9999 0 TD 0.0001 Tc (phase)Tj 267 0 TD 0 Tc (to)Tj -1800.9999 100 TD (encrypt)Tj 308 0 TD (the)Tj 148 0 TD (data stream)Tj 468.0001 0 TD -0.0001 Tc (for)Tj 132 0 TD 0 Tc (priv)Tj 140.9999 0 TD (acy)Tj 116 0 TD ()Tj 76 0 TD (Another)Tj 330.9999 0 TD (v)Tj 42.0002 0 TD -0.0001 Tc (ery)Tj -1762.0001 99.0001 TD 0 Tc [(practical)-27999.9(u)0(se)-27999.9(is)-29000.1(in)-29000(kx)-26999.9( )-29000(a)-28000(proto)-2000(c)0(ol)-28000(to)-27999.9(authen)]TJ 1672.0001 0 TD (ticate)Tj -1672.0001 100 TD [(and)-23000(f)0(orw)]TJ 315 0 TD [(ard)-21000(X)-0.1()-22000.1(connections)-23000(i)0(n)-23000.1(a)-21999.9(secure)-21999.8(w)]TJ 1213.0001 0 TD (a)Tj 40 0 TD (y)Tj 37 0 TD ()Tj 58 0 TD (Other)Tj -1663.0001 98.9999 TD [(programs)-26000(using)-27000(Kerb)-2000(eros)-26999.9(for)-26999.9(a)0(uthen)]TJ 1312.0001 0 TD [(tication)-28000(include)]TJ /T7 1 Tf -1312.0001 100 TD [(cvs)-23999.9(sudo)]TJ /T6 1 Tf 372.0001 0 TD -0.0001 Tc (and)Tj /T7 1 Tf 156.0001 0 TD (xlo)Tj 97.9999 0 TD 0 Tc (ck )Tj /T6 1 Tf 137 0 TD [(Kerb)-2000(eros)-21000.1(authen)]TJ 595.9999 0 TD [(tication)-22000(i)-0.2(s)-22000(a)0.2(lso)]TJ -1358.9999 100 TD 0.0001 Tc [(used)-27999.8(in)]TJ /T7 1 Tf 286 0 TD 0 Tc (AFS )Tj /T6 1 Tf -203 104.0001 TD [(One)-27999.9(o)-0.1(f)-28000(o)0.1(ur)-27000(future)-29000.1(goals)-26999.9(i)0(s)-28000.1(t)0.1(o)-28000(a)-0.1(llo)]TJ 1190 0 TD 27 Tc (wk)Tj 129 0 TD 0 Tc [(erb)-1999.8(erized)-27000(ap )]TJ -1402 100 TD [(plications)-30999.9(t)-0.1(o)-29999.9(u)-0.1(se)-31000(IPsec)-30000.1(services)-30000(when)-31000.1(p)-1999.9(o)0.2(ssible)-32000(t)0(h)]TJ 1795.9999 0 TD 0.0002 Tc (us)Tj -1795.9999 100 TD 0 Tc (a)Tj 40 0 TD (v)Tj 42.0001 0 TD (oiding)Tj 265 0 TD (double encryption)Tj 697.9999 0 TD (and)Tj 210.0001 0 TD (consequen)Tj 365.9998 0 TD (tly)Tj 143 0 TD 0.0001 Tc (de )Tj -1763.9999 99.0001 TD 0 Tc (graded)Tj 287 0 TD [(p)-2000.1(e)0(rformance)]TJ 584 0 TD (F)Tj 47.0001 0 TD (urthermore)Tj 475.9999 0 TD (w)Tj 57.9999 0 TD (e)Tj 79.0002 0 TD (in)Tj 67 0 TD (tend)Tj 202.9998 0 TD (to)Tj 224.0002 -5317 TD (in)Tj 67 0 TD (tegrate)Tj 290.9998 0 TD 0.0001 Tc (the)Tj 152.0002 0 TD 0 Tc [(Kerb)-2000.2(e)0(ros)]TJ 363 0 TD (\015)Tj 78.9998 0 TD (clone)Tj 222.0002 0 TD -0.0001 Tc [(b)-2000.1(eing)]TJ 233 0 TD -0.0004 Tc (dev)Tj 125 0 TD 0 Tc [(elop)-2000(ed)]TJ 269 0 TD (at)Tj -1801 100 TD (KTH)Tj 225 0 TD (as)Tj 112 0 TD [(so)-2000(on)]TJ 201.9998 0 TD 0.0002 Tc (as)Tj 113 0 TD 0 Tc (it)Tj 93 0 TD 0.0002 Tc (is)Tj 94 0 TD 0 Tc (stable)Tj 276 0 TD [(esp)-2000(ecially)]TJ 385.0002 0 TD (since)Tj 213 0 TD 0.0001 Tc (Ker )Tj -1713 99 TD 0 Tc [(b)-2000(eros)-26999.8(IV)-27999.8(only)-27000.2(supp)-1999.8(orts)-27000.2(DES)-28000()-0.2( )]TJ 1161.9998 0 TD 0.0001 Tc [()-27999.9(e)0.1(ncryption)]TJ /T5 1 Tf -1161.9998 209.9995 TD 0 Tc ()Tj 237.9998 0 TD (SKey)Tj /T6 1 Tf -155 210.0005 TD [(SKey)-20000()0()-21000()-0.2()]TJ 488.0002 0 TD [()-22000(i)0.2(s)-21000.2(a)-21000(one time)-20999.8(passw)]TJ 731.9998 0 TD [(ord)-20000.2(system)-21000(used)]TJ -1302.9998 99 TD (for)Tj 139.9998 0 TD (authen)Tj 247.0002 0 TD (tication)Tj 375 0 TD (It)Tj 102.9998 0 TD (pro)Tj 119.0002 0 TD (vides)Tj 221.9998 0 TD (protection)Tj 410.0002 0 TD (against)Tj -1616 100 TD -0.0001 Tc (repla)Tj 179 0 TD 0 Tc [(y)-27000(attac)]TJ 253.9998 0 TD [(ks)-27000.2(where)-27000(a)-28000.2(third)-29000(part)]TJ 774.0002 0 TD 0.0001 Tc [(y)-26999.7(c)0.1(aptured)-26999.9(a)-27999.9(p)0.6(ass )]TJ -1207 99 TD 0 Tc (w)Tj 57.9998 0 TD 0.0001 Tc (ord)Tj /T7 1 Tf 179.0002 0 TD 0 Tc (e g )Tj /T6 1 Tf 188 0 TD (b)Tj 43.9998 0 TD (y)Tj 78.0002 0 TD (means)Tj 261 0 TD -0.0002 Tc (of)Tj 101 0 TD 0 Tc (net)Tj 113 0 TD (w)Tj 58 0 TD (ork)Tj 152 0 TD (sning)Tj 317 0 TD (and)Tj 168 0 TD 0.0001 Tc (tries)Tj -1717 100 TD 0 Tc [(to)-27000(reuse)-26999.8(i)-0.2(t)-28000(i)0.2(n)-28000(a)-27000(new)-28000(a)0.2(uthen)]TJ 980.9998 0 TD [(tication)-27000.2(session)]TJ -898 102.9995 TD 0.0001 Tc (SKey)Tj 282 0 TD (uses)Tj 198 0 TD 0 Tc (a)Tj 91.0002 0 TD -0.0001 Tc (user)Tj 196.9998 0 TD 0 Tc (supplied)Tj 350 0 TD (secret)Tj 257.0002 0 TD -0.0001 Tc (pass phrase)Tj -1458 100 TD 0 Tc (whic)Tj 163.9998 0 TD -0.0001 Tc [(h)-31000.3(i)0.1(s)-31000.1(p)-0.3(ro)-2000.1(cessed)-30000.3(b)]TJ 584.0002 0 TD 31 Tc [(yao)31000.2(n)30999.8(e)31000( )31000(w)]TJ 359 0 TD 0 Tc (a)Tj 40 0 TD [(y)-29000(function)-31000(t)0(o)-30999.5(g)-0.5(ener )]TJ -1147 99.0005 TD [(ate)-26999.8(a)-26000.2(s)0.2(equence)-27000(of)-26000(one time)-27000.2(passw)]TJ 1196 0 TD -0.0001 Tc (ords)Tj 212 0 TD 0 Tc [(In)-27000(Op)-2000(enBSD)]TJ -1408 100 TD -0.0001 Tc (the)Tj 148 0 TD (one w)Tj 211 0 TD 0 Tc (a)Tj 40 0 TD [(y)-31000(f)0(unction)]TJ 406 0 TD [(can)-32000(b)-2000(e)]TJ 275.9998 0 TD (c)Tj 35 0 TD [(hosen)-31999.8(f)0(rom)-31999.5(a)]TJ 511.9998 0 TD (v)Tj 39.0005 0 TD -0.0001 Tc (ariet)Tj 165 0 TD 0 Tc (y)Tj -1832 100 TD [(of)-19000(computationally)-18999.8(non in)]TJ 923 0 TD (v)Tj 41.9998 0 TD [(ertible)-17999.8(h)-0.2(ash)-19999.8(functions)-19000(lik)]TJ 873.0002 0 TD (e)Tj -1838 99 TD -0.0001 Tc (MD\015)Tj 213.9998 0 TD 0.0001 Tc (\012)Tj 106 0 TD 0 Tc ()Tj 55.0002 0 TD [(or)-31999.8(SHA)]TJ 351.9998 0 TD 0.0001 Tc ( )Tj 106.0002 0 TD -0.0002 Tc ()Tj 79 0 TD 0 Tc (a)Tj 39.9998 0 TD (v)Tj 39.0002 0 TD (ailable)Tj 268 0 TD (in)Tj /T7 1 Tf 101 0 TD -0.0001 Tc (lib)Tj 79.9998 0 TD 0 Tc (c)Tj /T6 1 Tf 37.9998 0 TD ()Tj 76.0005 0 TD [(SKey)-31000(is)]TJ -1554 100 TD (still)Tj 169 0 TD (useful)Tj 244.9998 0 TD (when)Tj 225 0 TD 0.0001 Tc (other)Tj 224 0 TD 0 Tc (cryptographic)Tj 536.0002 0 TD [(proto)-2000(cols)]TJ 365 0 TD (are)Tj -1764 99.9998 TD -0.0001 Tc [(not)-26000.1(a)]TJ 186 0 TD 0 Tc (v)Tj 39 0 TD [(ailable)-25000(or)-25000.2(their)-26000(implemen)]TJ 929 0 TD [(tations)-26000(are)-25000(not)-27000.5(fully)]TJ -1154 99 TD (trusted)Tj /T7 1 Tf 305 0 TD (e g )Tj /T6 1 Tf 175 0 TD [(when)-22000(using)-21000(a)-20000(conference)-20999.8(terminal)-21000(ro)-1999.5(om)]TJ -480 100 TD -0.0001 Tc [(to)-27000.1(login)-27000.1(t)-0.1(o)-28000.1(a)-27000.1(home)-27000.3(mac)]TJ 842 0 TD (hine)Tj /T1 1 Tf -842 326 TD 0 Tc ()Tj 168 0 TD (Pseudo)Tj 401.9998 0 TD (Random)Tj 462.0002 0 TD (Num)Tj 241 0 TD 2.9998 Tc [(be)2999.8(r)]TJ 212 0 TD 0 Tc (Genera)Tj -1317 116.0002 TD -0.0001 Tc (tors)Tj /T6 1 Tf -85.0002 208.9998 TD 0 Tc (A)Tj 102.0002 0 TD (Pseudo)Tj 299 0 TD (Random)Tj 343.9998 0 TD 0.0001 Tc (Num)Tj 175 0 TD 2 Tc [(be)2000(r)]TJ 158.0002 0 TD 0 Tc (Generator)Tj 403.9995 0 TD 0.0001 Tc (PRNG)Tj -1564.9995 100 TD 0 Tc (pro)Tj 119 0 TD (vides)Tj 235 0 TD (applications)Tj 487 0 TD -0.0001 Tc (with)Tj 214 0 TD 0 Tc (a)Tj 94.9998 0 TD (stream)Tj 298.0002 0 TD -0.0005 Tc (of)Tj 120 0 TD 0 Tc (n)Tj 44 0 TD (um)Tj 113 0 TD [(b)-2000(ers)]TJ -1725 100 TD (whic)Tj 163.9998 0 TD 29 Tc [(hh)28999.8(a)]TJ 161.0002 0 TD 0 Tc (v)Tj 42 0 TD [(e)-28999.8(certain)-29000(imp)-1999.8(ortan)]TJ 678 0 TD [(t)-28999.8(p)0(rop)-2000(e)0(rties)-28000.2(for)-29000.5(s)0(ystem)]TJ -1045 99 TD (securit)Tj 238.9998 0 TD (y)Tj /T8 1 Tf -156 197.0002 TD ( )Tj /T6 1 Tf 83.0002 0 TD -0.0002 Tc (It)Tj 94 0 TD 0 Tc [(should)-30999.8(b)-2000.2(e)-31999.8(imp)-2000(o)0.2(ssible)-31999.8(for)-31000(a)0.2(n)-31000(o)-0.2(utsider)-31000(to)-32000(pre )]TJ -94 99 TD [(dict)-20000(the)-19000(o)-0.2(utput)-20000.2(o)0.2(f)-19000.2(t)0.2(he)-20000(random)-18000(n)]TJ 1117 0 TD (um)Tj 113 0 TD 0.0001 Tc [(b)-1999.9(e)0.1(r)-18999.9(generator)]TJ -1230 100 TD -0.0002 Tc (ev)Tj 78.9998 0 TD 0 Tc [(en)-27000.2(with)-28000(kno)]TJ 429.0002 0 TD [(wledge)-27000.2(of)-27000(previous)-27000(o)0.2(utput)]TJ /T8 1 Tf -591.0002 179.9998 TD ( )Tj /T6 1 Tf 83.0002 0 TD [(The)-22000(generated)-21000(n)]TJ 582 0 TD -0.0002 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(ers)-21000(should)-22000(not)-22000(h)0(a)]TJ 658 0 TD (v)Tj 42 0 TD 0.0002 Tc [(e)-20999.8(r)0.7(ep)-1999.8(eat )]TJ -1395 99 TD 0 Tc (ing)Tj 154.9998 0 TD (patterns)Tj 345.0002 0 TD -0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 89.9998 0 TD (means)Tj 271.0002 0 TD -0.0001 Tc (the)Tj 158.9998 0 TD 0 Tc (PRNG)Tj 289.0002 0 TD -0.0001 Tc (should)Tj -1473 100 TD 0 Tc (ha)Tj 85.9998 0 TD (v)Tj 42.0002 0 TD 25.9998 Tc [(ea)-2000.2(v)]TJ 174.9998 0 TD 0 Tc [(ery)-26000.2(l)0.2(ong)-27000(cycle)-26999.8(l)-0.2(ength)]TJ /T8 1 Tf -386 180.0002 TD ( )Tj /T6 1 Tf 83.0002 0 TD (A)Tj 96 0 TD (PRNG)Tj 279 0 TD -0.0002 Tc (is)Tj 90 0 TD 0 Tc (normally)Tj 355 0 TD -0.0001 Tc (just)Tj 169.9998 0 TD 0.0002 Tc (an)Tj 122 0 TD 0 Tc (algorithm)Tj 385.0002 0 TD (where)Tj -1497 98.9999 TD (the)Tj 156 0 TD (same)Tj 220 0 TD (initial)Tj 252.9998 0 TD 0.0001 Tc (starting)Tj 322.0002 0 TD 0 Tc (v)Tj 38.9998 0 TD (alues)Tj 221 0 TD 0.0001 Tc (will)Tj 169.0002 0 TD 0 Tc (yield)Tj 214 0 TD (the)Tj -1594 100 TD [(same)-27000(sequence)-27000(of)-27999.8(outputs)]TJ -83.0002 196 TD (Some)Tj 230 0 TD (applications)Tj 471.0002 0 TD (ha)Tj 85.9998 0 TD (v)Tj 42.0002 0 TD (e)Tj 73 0 TD (criteria)Tj 295 0 TD (whic)Tj 164 0 TD (h)Tj 83 0 TD 0.0001 Tc (aect)Tj 233 0 TD 0 Tc (the)Tj -1760 100 TD (t)Tj 30 0 TD 30.9998 Tc [(y)30999.8(p)28999.8(eo)30999.8(f)999.6(P)31000(R)30999.6(N)30999.8(Gw)30999.6(h)31000(i)30999.6(c)]TJ 696.9998 0 TD 0 Tc [(h)-30000(i)0(s)-30000(n)-0.2(eeded)]TJ 480.0002 0 TD (F)Tj 47 0 TD [(or)-30000(instance)-31000.5(later)]TJ -1254 100 TD (on)Tj 123 0 TD (w)Tj 58 0 TD (e)Tj 71.9998 0 TD 0.0001 Tc (will)Tj 165.0002 0 TD 0 Tc (discuss)Tj 286 0 TD (IP)Tj 121.9998 0 TD 0.0001 Tc (datagram)Tj 382.0002 0 TD -0.0001 Tc (IDs)Tj 161 0 TD 0 Tc (and)Tj 170 0 TD (DNS)Tj 207 0 TD (\012)Tj 105.9995 0 TD ()Tj -1851.9995 99 TD [(query IDs)-27000(b)-2000.2(oth)-28000(of)-28000(these)-27000(issues)-27000(h)0.2(a)]TJ 1229 0 TD (v)Tj 42 0 TD [(e)-27000(q)0(ualities)-26999.5(whic)]TJ 557.9995 0 TD (h)Tj -1828.9995 100 TD (mak)Tj 152.9998 0 TD [(e)-27000.2(i)0.2(t)-28000.2(extremely)-27000(desirable)-27000(to)-28000(ha)]TJ 1065.0002 0 TD (v)Tj 42 0 TD 0.0001 Tc [(e)-25999.9(a)-26999.9(PRNG)-27999.4(whic)]TJ 568.9995 0 TD 0 Tc (h)Tj -1828.9995 99.9999 TD (mak)Tj 152.9998 0 TD [(es)-21000.2(eorts)-22000(t)0(o)-22000(a)]TJ 474 0 TD (v)Tj 42 0 TD [(oid)-20999.8(emitting)-23000(r)-0.2(ep)-2000(etitions)-22000(th)]TJ 975.0002 0 TD -0.0002 Tc [(us)-23000.7(rul )]TJ -1644 99.0001 TD 0 Tc [(ing)-26999.8(out)-28000.2(u)0.2(se)-27000.2(of)-28000(a)-27000(t)0.2(rue random)-26000(source)]TJ 82.9998 103.0001 TD (Man)Tj 162 0 TD [(y)-32000(other)-31000.2(op)-1999.8(erating)-31000.2(systems)-31999.8(also)-30999.8(ha)]TJ 1243.0002 0 TD (v)Tj 42 0 TD 0.0001 Tc [(e)-30999.9(random)]TJ -1530 100 TD 0 Tc (n)Tj 44 0 TD -0.0002 Tc (um)Tj 112.9998 0 TD 2.0002 Tc [(be)2000.2(r)]TJ 168.0002 0 TD 0 Tc (device)Tj 274 0 TD -0.0001 Tc (driv)Tj 144 0 TD (ers)Tj 151.9998 0 TD 0.0001 Tc (and)Tj 184.0002 0 TD 0 Tc (other)Tj 240 0 TD (related)Tj 300 0 TD (mec)Tj 141 0 TD (ha )Tj -1760 100 TD [(nisms)-28000(but)-27999.8(l)-0.2(argely)-27000(m)-0.2(ak)]TJ 831 0 TD [(e)-26999.8(n)-0.2(o)-27000(u)0.2(se)-28000.2(of)-28000(them)]TJ 663 0 TD 0.0001 Tc [(Some)-26999.4(suc)]TJ 334.9995 0 TD 0 Tc (h)Tj -1828.9995 99.0001 TD [(systems)-28000(ev)]TJ 387.9998 0 TD 0.0001 Tc [(en)-28999.9(pro)]TJ 231 0 TD -0.0001 Tc [(vide)-27000.3(suc)]TJ 291.0002 0 TD 0 Tc [(h)-29000(s)0(upp)-2000(o)0.2(rt)-28000(only)-29000(as)-28000(optional)]TJ ET endstream endobj 26 0 obj << /ProcSet [/PDF /Text ] /Font << /T1 4 0 R /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 11 0 R /T10 18 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 28 0 obj << /Length 20797 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 709.14 Tm 0 g /GS1 gs 0 Tc 0 Tw (device)Tj 260.0001 0 TD (driv)Tj 144 0 TD (ers)Tj 163.9999 0 TD (therefore)Tj 357.0001 0 TD (discouraging)Tj 488.9999 0 TD (use)Tj 153.0001 0 TD ()Tj /T7 1 Tf 32 0 TD (i e )Tj /T6 1 Tf 178.9998 0 TD 0.0001 Tc (re )Tj -1777.9999 100 TD 0 Tc (liance)Tj 311 0 TD [(Op)-1999.9(enBSD)-31000.1(deviates)-31000.1(b)]TJ 764 0 TD [(y)-31000(actually)-30000.1(using)-30999.8(these)]TJ -1075 99 TD (mec)Tj 141.0001 0 TD [(hanisms)-30000(i)0.1(n)-31000(n)]TJ 465.9999 0 TD [(umerous)-30000.1(w)]TJ 394 0 TD (a)Tj 40 0 TD 0.0001 Tc (ys)Tj 146.0001 0 TD -0.0001 Tc [(A)-31000.1(f)-0.1(ew)-31000.1(ma)-5000.3(jor)-30000.3(i)0.1(n)]TJ 558.9998 0 TD 0.0001 Tc (ter )Tj -1745.9999 100 TD 0 Tc [(faces)-27000(or)-26999.9(tec)]TJ 407.0001 0 TD [(hniques)-27000(a)0(re)-26999.9(used)]TJ /T8 1 Tf -324.0001 186.9995 TD ( )Tj /T9 1 Tf 83.0001 0 TD (devrandom)Tj /T6 1 Tf 550.9999 0 TD [(and)-27000.1(s)0.1(imilar)-27000(k)]TJ 476.0001 0 TD [(ernel)-27000(i)0(n)]TJ 270 0 TD (terfaces)Tj /T8 1 Tf -1380.0001 170.0005 TD ( )Tj /T7 1 Tf 83.0001 0 TD -0.0001 Tc (ar)Tj 72.9999 0 TD 0.0001 Tc (cr)Tj 111.0001 0 TD 0 Tc (andom)Tj /T6 1 Tf 379.9999 0 TD 0.0001 Tc [(in)-27999.8(lib)-1999.9(c)]TJ /T8 1 Tf -647 171 TD 0 Tc ( )Tj /T6 1 Tf 83.0001 0 TD [(non rep)-1999.9(eating)-26000.1(PRNG)]TJ -83.0001 187 TD 0.0001 Tc (Eac)Tj 134.0001 0 TD 0 Tc [(h)-22000(o)0.1(f)-24000.1(t)0.1(hese)-25000(a)0(nd)-22999.9(their)-24000(uses)-23000(in)-23999.9(Op)-2000(enBSD)-24000.2(will)-23999.8(b)-2000.2(e)]TJ -217.0001 99 TD (co)Tj 77 0 TD (v)Tj 42.0001 0 TD [(ered)-26000(in)-28000.1(the)-28000(follo)]TJ 571.9999 0 TD [(wing)-26000(sections)]TJ /T5 1 Tf -691 203 TD ( )Tj 238.0001 0 TD (Kernel)Tj 342.9999 0 TD (Randomness)Tj 608 0 TD (P)Tj 68 0 TD 3.0001 Tc [(oo)3000.2(l)]TJ /T6 1 Tf -1174 202 TD 0 Tc (Computers)Tj 439.0001 0 TD (are)Tj 151.9999 0 TD (generally)Tj 432.0001 0 TD (deterministic)Tj 513 0 TD (devices)Tj -1619.0001 100 TD (making)Tj 299 0 TD 0.0001 Tc (it)Tj 90 0 TD 0 Tc (v)Tj 42 0 TD (ery)Tj 147.0001 0 TD (hard)Tj 200 0 TD -0.0001 Tc (to)Tj 107.9999 0 TD 0 Tc [(pro)-2000(duce)]TJ 323 0 TD (real)Tj 168 0 TD (random)Tj 311.0001 0 TD (n)Tj 44 0 TD (um )Tj -1732.0001 100 TD 2.0001 Tc [(be)2000.1(r)2000.2(s)2000()]TJ 216.0001 0 TD 0 Tc [(The)-29000(PRNGs)-29000(w)]TJ 537.0001 0 TD [(e)-28999.9(use)-29000(in)-29999.9(Op)-2000.1(enBSD)-29000.1(do)-30000.2(not)-29000(g)0.2(en )]TJ -753.0001 98.9998 TD [(erate)-23000(r)0.1(andom)-23999.9(n)]TJ 550.0001 0 TD -0.0001 Tc (um)Tj 112.9999 0 TD 0 Tc [(b)-2000(e)0(rs)-22999.9(themselv)]TJ 493.0001 0 TD -0.0001 Tc (es)Tj 128.9999 0 TD 0 Tc [(Rather)-23999.8(they)-25000(ex )]TJ -1285 100 TD [(pand)-30000.1(the)-29999.9(randomness)-29000(they)-30000.1(are)-29000(g)0(iv)]TJ 1248 0 TD [(en)-30000.1(as)-29000.1(input)]TJ 477.9999 0 TD (F)Tj 47.0002 0 TD (or )Tj -1773.0001 100 TD (tunately)Tj 295.0001 0 TD ()Tj 65 0 TD (a)Tj 81.0001 0 TD (m)Tj 66.9999 0 TD (ulti user)Tj 339.0001 0 TD [(op)-2000.1(erating)]TJ 383 0 TD (system)Tj 286.9998 0 TD 0.0001 Tc (has)Tj 160 0 TD (man)Tj 155 0 TD 0 Tc (y)Tj -1831.9999 99.0002 TD [(external)-30999.9(e)-0.1(v)]TJ 404.0001 0 TD (en)Tj 80.9999 0 TD [(ts)-31000(from)-31000(whic)]TJ 460 0 TD [(h)-32000(i)0(t)-32000(can)-31000(deriv)]TJ 502 0 TD 31 Tc [(es)31000(o)31000.2(m)31000(er)30999.8(a)31000.2(n)30999.8( )]TJ -1447 99.9998 TD 0 Tc (domness)Tj 370.0001 0 TD [(In)-29000(Op)-2000(enBSD)-29000(the)-30000(k)]TJ 685.0001 0 TD [(ernel)-28000(collects)-27999.8(m)0(easure )]TJ -1055.0001 99.0002 TD (men)Tj 149.9999 0 TD [(ts)-17999.9(from)-19000(v)]TJ 310.0001 0 TD [(arious)-17000(devices)-18000(suc)]TJ 625 0 TD 18.0001 Tc [(ha)18000.2(st)18000(h)18000.2(e)0.1(i)18000.1(n)]TJ 357 0 TD 0 Tc (ter k)Tj 171.9999 0 TD (eypress)Tj -1613.9999 100 TD (timing)Tj 270.0001 0 TD (from)Tj 202.9999 0 TD (terminals)Tj 397 0 TD (the)Tj 150 0 TD (arriv)Tj 170 0 TD (al)Tj 99 0 TD (time)Tj 196.0001 0 TD -0.0002 Tc (of)Tj 101 0 TD 0 Tc (net)Tj 113 0 TD (w)Tj 58 0 TD -0.0001 Tc (ork)Tj -1757.0001 100 TD 0.0001 Tc (pac)Tj 123.0001 0 TD 0 Tc (k)Tj 41.9999 0 TD [(ets)-23000(a)0.1(nd)-22999.9(the)-23000(nishing)-23000(time)-24000(of)-23000.1(disk)-23000.1(requests)]TJ 1567.0001 0 TD (The)Tj -1732.0001 99 TD [(randomness)-18999.9(from)-21000(these)-20999.9(s)-0.1(ources)-19000(is)-21000.1(mixed)-21000(in)]TJ 1506.0001 0 TD -0.0001 Tc [(to)-20000.1(the)-21000.3(k)]TJ 271.9998 0 TD 0.0001 Tc (er )Tj -1777.9999 100 TD 0 Tc (nels)Tj /T7 1 Tf 202 0 TD (entr)Tj 144 0 TD (opy)Tj 166 0 TD (p)Tj 38.0001 0 TD (o)Tj 37.9999 0 TD (ol )Tj /T6 1 Tf 163 0 TD (When)Tj 255.0001 0 TD (a)Tj 81.9999 0 TD (userland)Tj 345 0 TD (program)Tj 344.9999 0 TD 0.0001 Tc (re )Tj -1777.9999 100 TD 0 Tc [(quests)-30999.9(random)-31000(data)-30000(from)-32000(the)-31000(k)]TJ 1146 0 TD [(ernel)-32000(a)0(n)-30999.8(M)-0.2(D\015)-30999.8(hash)]TJ -1146 99 TD [(is)-32000(calculated)-30999.9(o)]TJ 524 0 TD (v)Tj 42.0001 0 TD [(er)-29999.9(the)]TJ 247.9999 0 TD [(whole)-30999.9(en)]TJ 320 0 TD (trop)Tj 151 0 TD 31 Tc [(yp)29000(o)29000.2(o)30999.8(l)31000.2()]TJ 288.0001 0 TD -0.0001 Tc (folded)Tj -1573.0001 100 TD 0 Tc [(in)-25000(half)-25000(b)]TJ 299 0 TD 25 Tc (yX)Tj 129 0 TD 0 Tc [(OR ing)-24000(the)-25000(upp)-1999.8(e)-0.1(r)-25000(a)0(nd)-24999.9(lo)]TJ 886 0 TD (w)Tj 58 0 TD -0.0001 Tc [(er)-23000.3(w)]TJ 150.9999 0 TD 0 Tc [(ord)-24000(o)0(f)-25000(the)]TJ -1522.9999 99 TD [(MD\015)-21999.9(o)-0.1(utput)-24000(and)-23000(returned)]TJ 1018.0001 0 TD -0.0001 Tc [(The)-23000(u)-0.2(ser)-22000.2(c)-0.1(an)-21999.9(c)]TJ 519 0 TD [(ho)-2000.1(ose)-21000.3(the)]TJ -1537.0001 100 TD 0 Tc (qualit)Tj 208 0 TD [(y)-21000.1(o)0.1(f)-21000(the)-22000(generated)-21000(random)-19999.9(n)]TJ 1005 0 TD (um)Tj 113 0 TD 2.0001 Tc [(be)2000.1(r)2000.2(s)-18999.7(b)]TJ 216.0001 0 TD 0 Tc [(y)-21000(r)0.2(eading)]TJ -1542.0001 100 TD [(output)-28000.1(f)0(rom)-26999.9(t)-0.1(he)-28000(dieren)]TJ 879 0 TD (t)Tj /T9 1 Tf 60 0 TD (devrandom)Tj /T6 1 Tf 551.0001 0 TD (devices)Tj /T5 1 Tf -1490.0001 202 TD ()Tj 238.0001 0 TD (arcrandom)Tj /T6 1 Tf -155.0001 202.9998 TD 0.0001 Tc (The)Tj /T7 1 Tf 198 0 TD (ar)Tj 73.0001 0 TD -0.0001 Tc (cr)Tj 110.9999 0 TD 0 Tc (andom)Tj /T6 1 Tf 408 0 TD (in)Tj 67 0 TD (terface)Tj 327 0 TD (a)Tj 40 0 TD (v)Tj 39 0 TD (ailable)Tj 290.0001 0 TD -0.0002 Tc (in)Tj 124 0 TD 0 Tc (the)Tj -1760.0001 99.0002 TD [(Op)-2000.1(enBSD)]TJ /T9 1 Tf 402.9999 0 TD (libc)Tj /T6 1 Tf 176.0001 0 TD ()Tj 62 0 TD (mak)Tj 153 0 TD 0.0001 Tc (es)Tj 108 0 TD (use)Tj 154.0001 0 TD -0.0001 Tc (of)Tj 105 0 TD (the)Tj 153.9999 0 TD 0 Tc (k)Tj 42 0 TD (ernel)Tj 212.9999 0 TD (random )Tj -1569.9999 99.9999 TD (ness)Tj 196.9999 0 TD 0.0001 Tc [(p)-2000(o)-1999.8(ol)]TJ 233.0001 0 TD 0 Tc [(describ)-2000(ed)]TJ 388 0 TD (in)Tj 117 0 TD (the)Tj 164.0001 0 TD (previous)Tj 351 0 TD (section)Tj 325.9998 0 TD 0.0001 Tc (for)Tj -1775.9999 100 TD 0 Tc (seeding)Tj 304.0001 0 TD (the)Tj 155.9999 0 TD (k)Tj 42 0 TD (eystream)Tj 367 0 TD (generator)Tj 382 0 TD (emplo)Tj 215.0001 0 TD (y)Tj 41.9998 0 TD (ed)Tj 123.0002 0 TD (b)Tj 44 0 TD (y)Tj 85 0 TD (the)Tj /T7 1 Tf -1760.0001 99 TD (AR)Tj 121 0 TD (C)Tj /T6 1 Tf 156 0 TD (cipher)Tj 277 0 TD (a)Tj 129 0 TD (cipher)Tj 276 0 TD (equiv)Tj 189 0 TD (alen)Tj 146 0 TD (t)Tj 87 0 TD (to)Tj 129.0001 0 TD (RSADSIs)Tj -1510.0001 100 TD (R)Tj 59 0 TD (C)Tj 218 0 TD (The)Tj 179 0 TD (in)Tj 67 0 TD (terface)Tj 279 0 TD 0.0001 Tc (pro)Tj 119 0 TD 0 Tc (vides)Tj 217 0 TD [(supp)-2000.1(ort)]TJ 316.0001 0 TD -0.0001 Tc (for)Tj 134.9998 0 TD 0 Tc (applica )Tj -1588.9999 99 TD (tions)Tj 209 0 TD 0.0001 Tc (to)Tj 107.0001 0 TD 0 Tc (add)Tj 250.0001 0 TD [(randomness)-32000(to)]TJ 566.9999 0 TD 0.0001 Tc (the)Tj 148 0 TD 2 Tc [(poo)2000(l)]TJ 189.9999 0 TD 0.0001 Tc (main)Tj 178.0002 0 TD 0 Tc (tained)Tj -1649.0001 100 TD (b)Tj 43.9999 0 TD (y)Tj /T7 1 Tf 79.0001 0 TD -0.0001 Tc (ar)Tj 72.9999 0 TD 0.0001 Tc (cr)Tj 111.0001 0 TD 0 Tc (andom )Tj /T6 1 Tf 437.9999 0 TD (This)Tj 197 0 TD (in)Tj 67 0 TD (terface)Tj 277.0001 0 TD -0.0002 Tc (is)Tj 90.9999 0 TD 0 Tc (in)Tj 67 0 TD (tended)Tj 280.0001 0 TD -0.0002 Tc (as)Tj 108.9998 0 TD 0 Tc (a)Tj -1832.9999 100 TD (drop in)Tj 305 0 TD (replacemen)Tj 405 0 TD (t)Tj 74.0001 0 TD -0.0001 Tc (for)Tj 141 0 TD (the)Tj 157.9999 0 TD 0 Tc (traditional)Tj 424.9999 0 TD (Unix)Tj /T7 1 Tf 217.0002 0 TD (r)Tj 31 0 TD -0.0001 Tc (an)Tj -1756.0001 99 TD 0 Tc (dom)Tj /T6 1 Tf 302 0 TD -0.0001 Tc (in)Tj 67.0001 0 TD 0 Tc (terface)Tj 307.9999 0 TD (for)Tj 138 0 TD (those)Tj 229 0 TD (applications)Tj 474.0001 0 TD 0.0001 Tc (that)Tj 190.9998 0 TD (need)Tj -1708.9999 100 TD 0 Tc (higher qualit)Tj 463.0001 0 TD 25.9999 Tc [(yr)25999.8(a)26000(n)25999.9(d)25999.8(o)26000(m)-1000.1(n)]TJ 418.9999 0 TD 0 Tc (um)Tj 113 0 TD 2.0001 Tc [(be)2000.1(r)2000.2(s)2000.1()]TJ /T5 1 Tf -995 201.9999 TD 0 Tc ()Tj 238.0001 0 TD [(Nonrep)-3000(eating)]TJ 693.0001 0 TD -0.0001 Tc (Random)Tj 418.9999 0 TD 0 Tc (Num)Tj 225.0001 0 TD 3 Tc [(be)3000.2(r)3000(s)]TJ /T6 1 Tf -1492.0001 203.0001 TD 0.0001 Tc (In)Tj 153 0 TD 0 Tc [(Op)-1999.9(enBSD)]TJ 463 0 TD (w)Tj 58 0 TD (e)Tj 113 0 TD (designed)Tj 386.0001 0 TD (a)Tj 118 0 TD [(non rep)-2000(eating)]TJ -1374.0001 100 TD [(pseudo random)-20000(n)]TJ 620 0 TD (um)Tj 113 0 TD [(b)-2000.1(e)0.1(r)-22000(generator)-20000.1(that)-23000.1(w)]TJ 736.9999 0 TD 0.0002 Tc [(as)-20999.6(v)]TJ 138 0 TD 0 Tc [(ery)-21000.2(fast)]TJ -1607.9999 99.0001 TD [(and)-26999.9(d)-0.1(id)-28000.1(not)-28000(r)0(equire)-27000(additional)-27000(r)0.1(esources)]TJ 2108 -5317 TD (F)Tj 47.0002 0 TD (or)Tj 127.9998 0 TD ( bit)Tj 266.0002 0 TD [(non rep)-2000(eating)]TJ 555 0 TD (n)Tj 44 0 TD -0.0002 Tc (um)Tj 113 0 TD -0.0001 Tc [(b)-2000.1(ers)]TJ 233 0 TD 0 Tc (w)Tj 58 0 TD (e)Tj 91 0 TD (used)Tj 215 0 TD (a)Tj -1833 100 TD -0.0001 Tc [(prime)-30000.1( )]TJ /T11 1 Tf 280 -30 TD -0.0002 Tc ( )Tj /T12 1 Tf 96.9998 30 TD 27 Tc ( p )Tj /T6 1 Tf 253.0002 0 TD 0 Tc ( )Tj /T11 1 Tf 42 -30 TD ( )Tj /T6 1 Tf 100 30 TD (and)Tj /T12 1 Tf 164 0 TD (g)Tj /T6 1 Tf 73 0 TD [(a)-29999.8(randomly)-29000(c)]TJ 480.9995 0 TD 0.0002 Tc [(hosen)-28999.8(g)0.7(en )]TJ -1489.9995 99 TD 0 Tc [(erator)-23000(for)]TJ /T13 1 Tf 366 0 TD (Z)Tj /T14 1 Tf 59 11.9995 TD (p)Tj /T6 1 Tf 38.9998 -11.9995 TD ()Tj 59.0002 0 TD [(Being)-24000.2(a)-23999.8(generator)]TJ /T12 1 Tf 688 0 TD (g)Tj /T6 1 Tf 66.9998 0 TD [(has)-24000(the)-25000(prop)-2000(ert)]TJ 554.0002 0 TD (y)Tj -1832 100 TD [(that)-23000.2(an)]TJ 261 0 TD 20.9998 Tc (yv)Tj 103.9998 0 TD -0.0001 Tc [(alue)-22000.3()]TJ /T12 1 Tf 235 0 TD 23.0001 Tc ( x p)Tj /T6 1 Tf 310.0002 0 TD 0 Tc [(can)-22000.2(b)-2000(e)-22999.8(g)-0.2(enerated)-21000(as)]TJ /T12 1 Tf 724 0 TD (x)Tj /T6 1 Tf 70.9995 0 TD ()Tj /T12 1 Tf 88.0005 0 TD (g)Tj /T14 1 Tf 43 -30 TD (y)Tj /T6 1 Tf -1836 130 TD -0.0001 Tc [(mo)-2000.1(d)]TJ /T12 1 Tf 219 0 TD 0 Tc (p)Tj /T6 1 Tf 42 0 TD [()-27999.8(for)-27000(some)-27000.2(v)]TJ 457 0 TD (alue)Tj /T12 1 Tf 175 0 TD (y)Tj /T6 1 Tf 44 0 TD ()Tj -854.0002 102 TD (W)Tj 78.0002 0 TD [(e)-27000(t)0.2(hen)-26000.2(pic)]TJ 355 0 TD [(k)-26000(r)0.2(andom)]TJ /T12 1 Tf 373.9998 0 TD (a)Tj /T6 1 Tf 44.0002 0 TD ()Tj /T12 1 Tf 49 0 TD (b)Tj /T6 1 Tf 62 0 TD (and)Tj /T12 1 Tf 160 0 TD (m)Tj /T6 1 Tf 99 0 TD 0.0001 Tc [(with)-26999.9( )]TJ /T11 1 Tf 230 -29.9995 TD 0 Tc ( )Tj /T12 1 Tf 93 29.9995 TD 22 Tc [( m)-1000( )]TJ /T6 1 Tf -1627 99 TD 0 Tc ( )Tj /T11 1 Tf 42 -30 TD ( )Tj /T6 1 Tf 97.9998 30 TD 0.0001 Tc [(so)-25999.9(that)]TJ /T12 1 Tf 183.0002 188 TD 0 Tc (f)Tj /T6 1 Tf 50 0 TD ()Tj /T12 1 Tf 32 0 TD (n)Tj /T6 1 Tf 50 0 TD ()Tj /T8 1 Tf 55 0 TD ()Tj /T12 1 Tf 87 0 TD (a)Tj /T8 1 Tf 63 0 TD ()Tj /T12 1 Tf 40.9998 0 TD (f)Tj /T6 1 Tf 50 0 TD ()Tj /T12 1 Tf 32.0002 0 TD (n)Tj /T8 1 Tf 67.9998 0 TD ()Tj /T6 1 Tf 83.0002 0 TD -0.0002 Tc [()-19000.2()]TJ /T12 1 Tf 176 0 TD 0 Tc (b)Tj /T6 1 Tf 117.9998 0 TD 0.0001 Tc [(mo)-1999.9(d)]TJ /T12 1 Tf 219.0002 0 TD 0 Tc (m)Tj /T6 1 Tf 73 0 TD ()Tj -1520 187 TD [(b)-2000(ecomes)-27000.2(a)-27000(l)0(inear)-27000.2(congruen)]TJ 956.9998 0 TD [(tial)-25999.8(generator)-26000.2(LCG)]TJ -874 103 TD (W)Tj 78.0002 0 TD [(e)-27999.8(t)0(hen)-27999.8(d)-0.2(etermine)-28000(the)-28000.2(a)0.2(ctual)-27000(I)0.2(D)-28000.2(a)0(s)]TJ /T12 1 Tf 250 187 TD 7 Tc (ID)Tj /T6 1 Tf 114 0 TD 0 Tc ()Tj /T12 1 Tf 31.9998 0 TD (n)Tj /T6 1 Tf 50 0 TD 24 Tc ()Tj /T12 1 Tf 143 0 TD 0 Tc (w)Tj /T8 1 Tf 81.0002 0 TD ()Tj /T6 1 Tf 82.9998 0 TD ()Tj /T12 1 Tf 32.0002 0 TD (g)Tj /T14 1 Tf 42.9998 -34 TD (f)Tj /T11 1 Tf 39 0 TD ()Tj /T14 1 Tf 26.0002 0 TD (n)Tj /T11 1 Tf 41 0 TD ()Tj /T6 1 Tf 85 34 TD [(mo)-2000(d)]TJ /T12 1 Tf 187 0 TD (p)Tj /T6 1 Tf 42 0 TD ()Tj /T12 1 Tf 32 0 TD ()Tj /T6 1 Tf -1441 188 TD -0.0001 Tc (where)Tj /T12 1 Tf 251.9998 0 TD 0 Tc (w)Tj /T6 1 Tf 102.0002 0 TD -0.0002 Tc (is)Tj 95 0 TD 0 Tc (a)Tj 81 0 TD -0.0001 Tc (random)Tj 317 0 TD (seed)Tj 249 0 TD 0 Tc (After)Tj 228.9998 0 TD (the)Tj 155.0002 0 TD (linear)Tj 243 0 TD 0.0001 Tc (con )Tj -1723 99 TD 0 Tc (gruen)Tj 201.9998 0 TD 0.0001 Tc (tial)Tj 159.0002 0 TD 0 Tc (generator)Tj 382.9998 0 TD (has)Tj 161.0002 0 TD 2 Tc [(be)2000.2(e)2000(n)]TJ 208.9998 0 TD 0 Tc (exhausted)Tj 429.0002 0 TD (the)Tj 156 0 TD (most)Tj -1699 100 TD (signican)Tj 336 0 TD (t)Tj 64.9998 0 TD (bit)Tj 136.0002 0 TD (in)Tj /T12 1 Tf 102.9998 0 TD 7.0002 Tc (ID)Tj /T6 1 Tf 114.0002 0 TD 0 Tc ()Tj /T12 1 Tf 32 0 TD (n)Tj /T6 1 Tf 50 0 TD ()Tj 67 0 TD -0.0002 Tc (is)Tj 90 0 TD 0 Tc (toggled)Tj 296.9998 0 TD (and)Tj 168.0002 0 TD (all)Tj 122 0 TD (parame )Tj -1580 99 TD -0.0001 Tc (ters)Tj /T12 1 Tf 163.9998 0 TD 0 Tc (g)Tj /T6 1 Tf 43 0 TD ()Tj /T12 1 Tf 52.0002 0 TD (a)Tj /T6 1 Tf 43.9998 0 TD ()Tj /T12 1 Tf 53.0002 0 TD (b)Tj /T6 1 Tf 36 0 TD ()Tj /T12 1 Tf 52.9998 0 TD (m)Tj /T6 1 Tf 73.0002 0 TD 28.9998 Tc [(a)28999.6(n)28999.8(d)]TJ /T12 1 Tf 216 0 TD 0 Tc (w)Tj /T6 1 Tf 90.9998 0 TD -0.0001 Tc [(from)-29000.3(ab)-2000.1(o)]TJ 328 0 TD 0 Tc (v)Tj 42.0002 0 TD 28 Tc [(ea)28000.2(r)27999.8(e)0.2(c)]TJ 240 0 TD -0.0001 Tc [(hosen)-28000.1(anew)]TJ -1435 100 TD [(Because)-32000.1(t)-0.1(he)]TJ 472 0 TD 0 Tc [(linear)-32000(congruen)]TJ 563 0 TD 0.0001 Tc [(tial)-31999.7(generator)-30999.9(do)-1999.4(es)]TJ 719.9995 0 TD 0.0003 Tc (not)Tj -1754.9995 100 TD 0 Tc [(rep)-2000.2(eat)]TJ 262 0 TD (itself)Tj 206 0 TD (and)Tj 167 0 TD [(a)-32000(new)]TJ 251 0 TD (n)Tj 44 0 TD -0.0002 Tc (um)Tj 113 0 TD 1.9998 Tc [(be)1999.8(r)]TJ 150 0 TD -0.0001 Tc (space)Tj 228 0 TD 0 Tc [(is)-32000(c)]TJ 123 0 TD -0.0001 Tc [(hosen)-32000.1(a)-0.6(f )]TJ -1544 99 TD 0 Tc [(ter)-28000(r)0.2(einitialization)-27000(t)0(he)-27999.8(generated)-27000.2(IDs)-28000(do)-28000(not)-27000(rep)-2000(eat)]TJ 0 100 TD (themselv)Tj 318.9998 0 TD (es)Tj 128.0002 0 TD [(The)-23000(P)0(RNG)-22999.8(i)-0.2(s)-22000(t)]TJ 541.9998 0 TD [(ypically)-23000.2(seeded)-22000(with)-24000(ma )]TJ -988.9998 100 TD [(terial)-27000(from)-26999.8(the)-28000(k)]TJ 598 0 TD [(ernel)-27000(randomness)-26000(p)-1999.8(o)-2000.2(o)0.2(l)]TJ /T10 1 Tf -598 228 TD ()Tj 292 0 TD [(Randomness)-29000(Used)]TJ 795 0 TD [(Inside)-31000(the)-32000(K)0(ernel)]TJ /T8 1 Tf -1004.0002 157.9998 TD ( )Tj /T6 1 Tf 83.0002 0 TD [(Dynamic)-28000.2(sin)]TJ ET q 3 0 0 -0.48 389.988 393.288 cm /Im1 Do Q BT 0.12 0 0 -0.12 393 392.82 Tm [(p)-2000.2(o)0.2(rt)-26999.8(allo)-2000(cation)-26000(in)-28000(bind )]TJ -483.9998 138 TD [(When)-21999.8(an)-21000.2(AF)]TJ ET q 3 0 0 -0.48 390.828 376.728 cm /Im1 Do Q BT 0.12 0 0 -0.12 393.84 376.26 Tm [(INET)-21000(so)-2000(c)]TJ 342.0002 0 TD (k)Tj 41.9998 0 TD -0.0001 Tc [(et)-20000.3(is)-21000.3(b)-2000.1(ound)-21000.1(t)-0.1(o)-21000.1(a)-21000.1(s)-0.1(p)-2000.1(ecic)]TJ -874.9998 99 TD 1.9998 Tc [(po)1999.6(r)2000(t)-26000.4(n)]TJ 227 0 TD -0.0002 Tc (um)Tj 113 0 TD -0.0001 Tc [(b)-2000.1(e)-0.1(r)-28999.9(u)-0.3(sing)-28000.3(the)]TJ /T7 1 Tf 508.9998 0 TD 0 Tc (bind)Tj /T6 1 Tf 292.0002 0 TD [(system)-28000(call)-29000(the)]TJ -1141 100 TD [(pro)-2000(cess)]TJ 302.9998 0 TD 0.0001 Tc (can)Tj 166.0002 0 TD 0 Tc (c)Tj 34.9998 0 TD 0.0001 Tc [(ho)-1999.9(ose)]TJ 242.0002 0 TD -0.0001 Tc (the)Tj 156.9998 0 TD 0 Tc [(sp)-2000(ecic)]TJ 302.0002 0 TD [(p)-2000(ort)]TJ 223 0 TD (or)Tj 115 0 TD (elect)Tj -1543 100 TD [(that)-20999.8(the)-20000(s)0.2(ystem)-21000.2(c)]TJ 611.9998 0 TD 0.0001 Tc [(ho)-1999.9(ose)]TJ 258.0002 0 TD 0 Tc [(Normal)-18999.8(UNIX)-21000(b)-2000(eha)]TJ 698 0 TD (vior)Tj -1568 99 TD [(resulted)-29000(in)-29000(the)-29999.8(system)-28999.8(allo)-2000.2(cating)-28000.2(p)-2000(ort)-29000(n)]TJ 1446 0 TD (um)Tj 113 0 TD [(b)-2000(ers)]TJ -1559 100 TD (starting)Tj 321.9998 0 TD 0.0002 Tc (at)Tj 114 0 TD -0.0001 Tc ( )Tj 207.0002 0 TD 0 Tc (and)Tj 174 0 TD (incremen)Tj 326 0 TD -0.0001 Tc (ting)Tj 240 0 TD 0 Tc (Our)Tj 183 0 TD -0.0003 Tc (new)Tj -1566 100 TD -0.0001 Tc [(co)-2000.3(de)-29000.1(c)]TJ 227.9998 0 TD 0 Tc [(ho)-2000.2(oses)-27000(a)-27999.8(r)-0.2(andom)-28000(p)-2000(ort)-29000(i)0(n)-29000(t)-0.2(he)-30000.2(range)-27000( )]TJ -227.9998 99.0002 TD -0.0001 Tc [(to)-28000.1(\015)]TJ 0 137.9998 TD 0 Tc (A)Tj 95 0 TD (similar)Tj 278.9998 0 TD [(issue)-32000(e)-0.2(xisted)]TJ 489.0002 0 TD -0.0001 Tc (with)Tj 195 0 TD 0 Tc (reserv)Tj 214.9998 0 TD [(ed)-30999.5(p)-2000.5(ort)]TJ 302.0002 0 TD (cre )Tj -1575 100 TD -0.0001 Tc (ation)Tj 276 0 TD (using)Tj 250 0 TD (the)Tj /T7 1 Tf 175 0 TD 0 Tc (bindr)Tj 182.9998 0 TD 0.0001 Tc (esvp)Tj 148.0002 0 TD 0 Tc (ort)Tj /T6 1 Tf 277 0 TD (and)Tj /T7 1 Tf 194 0 TD -0.0005 Tc (rr)Tj 66 0 TD 0 Tc (esv)Tj -1569 99.0002 TD (p)Tj 38 0 TD (ort)Tj /T6 1 Tf 244 0 TD [(library)-27999.8(routines)-27999.8(whic)]TJ 778.9998 0 TD [(h)-29000(a)-0.2(re)-28000.2(supp)-1999.5(osed)-28000.5(to)]TJ -1060.9998 99.9999 TD (pic)Tj 103.9998 0 TD [(k)-26000(a)-26000(f)0(ree)-26000.2(p)-1999.8(ort)-26000.2(i)0.2(n)-26000.2(t)0(he)-27000.2(reserv)]TJ 929.0002 0 TD [(ed)-23999.8(range)-25000()0(t)]TJ 394 0 TD (ypically)Tj -1427 99 TD 1.9998 Tc [(be)1999.8(t)]TJ 115 0 TD 0 Tc (w)Tj 57.9998 0 TD (een)Tj 152.0002 0 TD [()-30000(and)-31000( \012)]TJ 592 0 TD [(The)-31000.2(old)-31999.8(b)-2000.2(eha)]TJ 488 0 TD -0.0003 Tc [(vior)-30000.8(w)]TJ 230 0 TD 0 Tc (as)Tj -1635 100 TD [(to)-27000(allo)-2000(cate)-26000(decreasing)-26000(p)-2000.2(o)0.2(rt)-27000(n)]TJ 1034.9998 0 TD 0.0002 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)-0.2(rs)-27000(starting)-26000(at)]TJ -1147.9998 100 TD ( \012)Tj 252.9998 0 TD 0.0001 Tc (The)Tj 180.0002 0 TD -0.0001 Tc (old)Tj 147 0 TD 0.0001 Tc [(co)-1999.7(de)]TJ 201 0 TD -0.0001 Tc (for)Tj 136 0 TD (these)Tj 221 0 TD 0 Tc (library)Tj 280 0 TD (routines)Tj -1418 99.0001 TD (eected)Tj 307 0 TD 0.0001 Tc (this)Tj 166.9998 0 TD 0.0002 Tc (do)Tj 86 0 TD (wn)Tj 104.0002 0 TD 0 Tc (w)Tj 57.9998 0 TD [(ard)-30000(s)-0.2(earc)]TJ 331 0 TD [(h)-31000.2(u)0(sing)-32000(successiv)]TJ 620.0002 0 TD (e)Tj -1673 100 TD [(calls)-20999.8(t)0(o)]TJ /T7 1 Tf 273.9998 0 TD 0.0001 Tc (bind)Tj /T6 1 Tf 262 0 TD 25 Tc (w)Tj 106.0002 0 TD 21 Tc [(eh)21000(a)]TJ 143.9998 0 TD 0 Tc (v)Tj 42 0 TD [(e)-20000(r)-0.2(eplaced)-21000.2(this)-20999.5(with)-22000(co)-2000(de)]TJ -827.9998 100 TD -0.0001 Tc (using)Tj 229.9998 0 TD 0 Tc (a)Tj 82 0 TD 0.0001 Tc (new)Tj 141 0 TD 0.0002 Tc (er)Tj 109 0 TD 0 Tc (k)Tj 42 0 TD (ernel)Tj 215.0002 0 TD (in)Tj 66.9998 0 TD (terface)Tj 283.0002 0 TD -0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 86 0 TD (is)Tj 95.9995 0 TD (m)Tj 67.0005 0 TD (uc)Tj 80.9995 0 TD (h)Tj -1662.9995 98.9999 TD [(more)-26000(ecien)]TJ 453.9998 0 TD [(t)-27000.2(and)-25999.8(c)]TJ 254.0002 0 TD [(ho)-2000(oses)-26000.2(a)-25999.8(r)-0.2(andom)-26000(p)-2000(ort)-26000(n)]TJ 858 0 TD (um )Tj -1566 100 TD 0.0001 Tc [(b)-1999.7(e)0.1(r)-28000.1(w)0.1(ithin)-27999.7(t)0.1(he)-27999.7(reserv)]TJ 762 0 TD -0.0001 Tc [(ed)-26000.3(range)]TJ -762 138.0001 TD 0 Tc [(There)-18000(are)-16999.8(a)-18000.2(n)]TJ 464 0 TD -0.0002 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)0.2(r)-19000.2(o)0(f)-17999.8(p)-2000(o)-2000.2(orly)-18000(designed)-18000(proto)-2000(cols)]TJ -577 99 TD ()Tj /T7 1 Tf 32 0 TD (e g )Tj /T6 1 Tf 177 0 TD [(rsh)-24000(ftp)-24000(whic)]TJ 481.9998 0 TD -0.0001 Tc [(h)-23000.1(a)-0.3(re)-22000.3(aected)-23999.9(b)]TJ 550.0002 0 TD 0 Tc [(y)-22000(predictable)]TJ -1241 100 TD [(p)-1999.8(o)-0.2(rt)-25000(allo)-1999.8(cation)-25000.2(w)]TJ 640 0 TD [(e)-25000(b)-2000(eliev)]TJ 271.9998 0 TD -0.0001 Tc [(e)-26000.3(t)-0.1(hat)-25000.1(o)-0.1(ur)-25000.1(approac)]TJ 672.0002 0 TD 23 Tc [(hi)23000(s)]TJ -1584 99 TD 0 Tc [(making)-27000.2(it)-28000.2(harder)-26000(for)-26999.8(attac)]TJ 948.9998 0 TD (k)Tj 42.0002 0 TD [(ers)-26000.2(t)0(o)-26999.8(g)-0.2(ain)-27000(an)-28000(edge)]TJ /T8 1 Tf -1074.0002 176 TD ( )Tj /T6 1 Tf 83.0002 0 TD [(Pro)-2000(cess)-26000.2(P)0(IDs)]TJ ET endstream endobj 29 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 11 0 R /T9 17 0 R /T10 18 0 R /T11 30 0 R /T12 31 0 R /T13 32 0 R /T14 33 0 R >> /XObject << /Im1 23 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 35 0 obj << /Length 17543 >> stream BT /T9 1 Tf 0.12 0 0 -0.12 72 712.14 Tm 0 g /GS1 gs 0 Tc 0 Tw (char)Tj 218 0 TD (buf)Tj -218 199 TD (sprintf buf\012)Tj 567 0 TD (tmpfoo\015d\012)Tj 653 0 TD (getpid )Tj -1220 100 TD ( void)Tj 305 0 TD (mkdir buf\012)Tj 480 0 TD ()Tj /T6 1 Tf -785 265 TD (Figure)Tj 281 0 TD 0.0001 Tc (\012)Tj /T10 1 Tf 139.0001 0 TD -0.0001 Tc (The)Tj 216.9999 0 TD 0 Tc (W)Tj 91.0001 0 TD (rong)Tj 240.9999 0 TD (W)Tj 91 0 TD (a)Tj 42.9999 0 TD (y)Tj 104.0001 0 TD (T)Tj 58 0 TD (o)Tj 102.0001 0 TD (Generate)Tj 435.9998 0 TD (A)Tj -1802.9999 100 TD [(Random)-30000.1(Directory)]TJ /T6 1 Tf 166.0001 267 TD [(Programmers)-21000(o)-0.1(ften)-25000(use)-25000(t)0(his)-24000(v)]TJ 1056 0 TD [(alue)-25000(as)-24000(if)-25000.2(it)-25000.2(is)-24000(ran )]TJ -1056 100 TD (dom)Tj 217.9999 0 TD [(p)-2000(ossibly)]TJ 327 0 TD [(b)-2000.1(e)0.1(cause)]TJ 316 0 TD (of)Tj 103.0001 0 TD -0.0001 Tc (the)Tj 150.9999 0 TD 0 Tc [(comp)-1999.8(ellingly)]TJ 493.0001 0 TD (at )Tj -1608 100 TD (tractiv)Tj 241 0 TD [(e)-28000(a)0.1(rgumen)]TJ 377.9999 0 TD [(t)-28000(that)-29000(pid)-29000(n)]TJ 471.0001 0 TD -0.0001 Tc (um)Tj 112.9999 0 TD 0 Tc [(b)-2000(ers)-28000(are)-28000(eec )]TJ -1203 99 TD -0.0001 Tc (tiv)Tj 97 0 TD 0 Tc [(ely)-22999.9(r)-0.1(andom)-23000(on)-23000(a)-23000(busy)-23000(enough)-22000(system)]TJ 1425 0 TD [(Co)-2000(de)]TJ -1522 100 TD -0.0001 Tc (lik)Tj 88 0 TD 0 Tc [(e)-22999.9()0.1(srandomgetpid)-22000(is)-23000(quite)-24000.1(common)-24000(as)-22000.2(is)]TJ -88 100 TD [(co)-2000.1(de)-27000.1(similar)-27000(t)0(o)-28000(that)-28000.1(sho)]TJ 865.0001 0 TD [(wn)-26000(in)-27999.9(gure)-27000(\012)]TJ -865.0001 135 TD [(In)-22000(a)-20000.1(n)0(ormal)-21000(system)-20999.9(t)0(he)-20999.9(attac)]TJ 1023.9999 0 TD (k)Tj 42 0 TD [(er)-20000(will)-21000(ha)]TJ 325.9999 0 TD (v)Tj 42.0002 0 TD 20 Tc [(ea)-999.8(v)]TJ 162 0 TD -0.0001 Tc (ery)Tj -1596 99 TD 0 Tc [(easy)-21000.1(time)-23000(predicting)-21999.9(the)-23000(PID)-22000.1(and)-22000(t)0(h)]TJ 1290 0 TD -0.0001 Tc [(us)-22000.3(the)-22999.9(o)-0.3(b)]TJ 325 0 TD 0 Tc (vi )Tj -1615 100 TD [(ous)-23000(r)0.1(ace)-22999.9(attac)]TJ 498.9999 0 TD [(k)-23000(i)0(s)-24000(trivial)]TJ 425 0 TD -0.0001 Tc [(The)-24000.1(race)-23000.1(is)-24000.3(as)-23000.3(follo)]TJ 670.0001 0 TD (ws)Tj -1594 100 TD 0 Tc (the)Tj 151 0 TD (attac)Tj 183.0001 0 TD (k)Tj 41.9999 0 TD (er)Tj 104 0 TD (creates)Tj 286 0 TD (the)Tj 151 0 TD (directory)Tj 361 0 TD (rst)Tj 205.0001 0 TD (c)Tj 34.9998 0 TD 0.0001 Tc [(ho)-1999.9(os )]TJ -1517.9998 99 TD 0 Tc [(ing)-27000(the)-28000.1(m)0(o)-1999.9(d)-0.1(e)-26999.9(and)-27000.1(o)]TJ 704.9999 0 TD [(wnership)-27000(subsequen)]TJ 740.0001 0 TD -0.0001 Tc [(tly)-26000.3(i)0.1(t)-28000.3(i)-0.1(s)]TJ -1445 100 TD 0 Tc [(p)-1999.9(ossible)-23000(t)0(o)-23000(l)-0.1(o)-1999.9(o)0(k)-23000.1(a)0.1(t)-23000(and)-23000(replace)-22000(les)-24000.1(in)-23000(the)-24000(d)0(irec )]TJ 0 98.9998 TD (tory)Tj 144 0 TD ()Tj -144 136 TD -0.0001 Tc [(In)-30000.2(Op)-2000.2(enBSD)-29000.1(w)]TJ 579.9999 0 TD 0 Tc [(e)-29000(use)-30000(randomized)-28000(PIDs)-30000.2(w)0.2(ith)-29000(a)]TJ -579.9999 99.0002 TD [(couple)-26999.9(of)-28000(ob)]TJ 438.9999 0 TD [(vious)-26000(e)-0.1(xceptions)]TJ /T7 1 Tf 641 0 TD [(e g )-30000(i)0.2(nit)]TJ /T6 1 Tf 416.0001 0 TD ()Tj /T8 1 Tf -1579.0001 170.9998 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(RPC)-27000(t)0.1(ransaction)-27000.1(IDs)-26999.9()0(XID)]TJ 0 135.0002 TD -0.0001 Tc (Sun)Tj 210 0 TD 0 Tc (Microsystems)Tj 561.9999 0 TD (Remote)Tj 350 0 TD [(Pro)-2000(cedure)]TJ 438.9999 0 TD -0.0001 Tc (Call)Tj -1560.9998 99 TD 0 Tc (RPC)Tj 275.9999 0 TD (messages)Tj 358.0001 0 TD -0.0001 Tc (con)Tj 122.9999 0 TD 0 Tc (tain)Tj 176.0001 0 TD (a)Tj 75 0 TD (T)Tj 52.9999 0 TD [(ransaction)-32000(I)0.2(den)]TJ 565.0001 0 TD (ti )Tj -1626 100 TD [(er)-31000.1(XID)]TJ 398.9999 0 TD 0.0001 Tc (whic)Tj 164 0 TD 31.0001 Tc [(hm)31000.1(a)31000.2(t)31000(c)]TJ 255 0 TD 0 Tc [(hes)-31000.1(a)-30999.9(sen)]TJ 334.0001 0 TD [(t)-31999.9(query)-29999.8(against)]TJ -1152 100 TD -0.0001 Tc (its)Tj 125 0 TD 0 Tc (receiv)Tj 209.0001 0 TD -0.0001 Tc (ed)Tj 117.9999 0 TD 0 Tc (reply)Tj 176 0 TD ()Tj 85 0 TD (In)Tj 113 0 TD 0.0001 Tc (most)Tj 212 0 TD 0 Tc (RPC)Tj 214.0001 0 TD (systems)Tj 342 0 TD (the)Tj -1594 99 TD [(XID)-21000(o)0(f)-20000(the)-20000(rst)-20000.1(message)-19000(a)-19000(p)0(ro)-2000(cess)-19000(transmits)-19999.8(will)]TJ 0 100 TD [(b)-1999.9(e)-28000.1(initialized)-28000(using)-27000(the)-28000(co)-1999.9(de)-27999.9(sho)]TJ 1167 0 TD [(wn)-26000(in)-28000(gure)-27000()0()]TJ -1167 135 TD (Subsequen)Tj 378.9999 0 TD 0.0001 Tc (tly)Tj 92 0 TD 0 Tc ()Tj 59 0 TD (the)Tj 150 0 TD (XID)Tj 191.0001 0 TD -0.0001 Tc (for)Tj 133.9999 0 TD 0 Tc (eac)Tj 114 0 TD (h)Tj 79 0 TD -0.0001 Tc (pac)Tj 123.0001 0 TD 0 Tc (k)Tj 42 0 TD -0.0002 Tc (et)Tj 103 0 TD 0 Tc (is)Tj 90 0 TD 0.0001 Tc (sim )Tj -1556 100 TD 0 Tc [(ply)-28000(i)0.1(ncremen)]TJ 466.9999 0 TD [(ted)-27000.1(from)-26999.9(this)]TJ 532 0 TD [(Previously)-26000(w)]TJ 466.0001 0 TD 0.0001 Tc [(e)-26999.7(men )]TJ -1465 98.9998 TD 0 Tc [(tioned)-30000.1(that)-29000.1(a)-28999.9(l)-0.1(o)-1999.9(c)-0.1(al)-29000(user)-29000(migh)]TJ 1061.9998 0 TD [(t)-30000.1(b)-2000(e)-29000(a)0(ble)-30000(t)0.2(o)-29000.2(g)0.2(uess)]TJ -1061.9998 100 TD (what)Tj 217.9999 0 TD (kind)Tj 197 0 TD (of)Tj 104 0 TD (range)Tj 236.9999 0 TD 0.0001 Tc (the)Tj 153.0001 0 TD 0 Tc (next)Tj 197 0 TD -0.0001 Tc (PID)Tj 187.0001 0 TD 0 Tc (on)Tj 126 0 TD (the)Tj 153 0 TD 0.0001 Tc (sys )Tj -1572 100.0002 TD 0 Tc [(tem)-25999.9(migh)]TJ 341.9999 0 TD 26.0001 Tc [(tf)26000.1(a)26000.2(l)26000(l)1000.2(i)26000.1(n)]TJ 263 0 TD 0 Tc [(to)-26000(here)-26000(w)]TJ 360.0001 0 TD [(e)-25000(s)0.1(ee)-25000(that)-26000(an)-25000(outside)]TJ -965.0001 98.9998 TD (attac)Tj 182.9999 0 TD (k)Tj 42.0001 0 TD -0.0001 Tc (er)Tj 106.0001 0 TD 0 Tc (migh)Tj 178 0 TD (t)Tj 69.9999 0 TD (also)Tj 176.9999 0 TD 2.0001 Tc (be)Tj 123.0001 0 TD 0.0001 Tc (able)Tj 186.0001 0 TD -0.0001 Tc (to)Tj 112 0 TD 0 Tc (determine)Tj 397.9998 0 TD 0.0001 Tc (this)Tj -1574.9998 100.0001 TD 0 Tc (information)Tj 491.9999 0 TD [(Our)-31000(new)-31000(co)-2000(de)-30000(uses)-31000(arcrandom)]TJ -491.9999 99 TD [(to)-27000(initialize)-27000.1(the)-26999.9(XID)-27999.9(a)-0.1(nd)-27000.1(also)-26000(a)]TJ 1152 0 TD (v)Tj 41.9999 0 TD -0.0001 Tc [(oids)-25000.3(u)-0.1(sing)-27000.1(t)]TJ 415.9999 0 TD 0 Tc (w)Tj 58 0 TD (o)Tj -1667.9998 100 TD (iden)Tj 150 0 TD [(tical)-27000(n)]TJ 228.0001 0 TD -0.0001 Tc (um)Tj 112.9999 0 TD 0 Tc [(b)-2000(e)0(rs)-27999.9(consecutiv)]TJ 554.0001 0 TD -0.0001 Tc (ely)Tj 96.9999 0 TD 0 Tc ()Tj /T8 1 Tf -1225 171 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(NFS)-27999.9(R)-0.1(PC)-28000(transaction)-25999.9(IDs)-28000(XID)]TJ 0 135 TD (The)Tj 176.9999 0 TD (NFS)Tj 197 0 TD [(proto)-2000(col)]TJ 332 0 TD (uses)Tj 183.0001 0 TD -0.0001 Tc (RPC)Tj 210.9999 0 TD 0 Tc (pac)Tj 123 0 TD (k)Tj 42 0 TD (ets)Tj 134.9999 0 TD (for)Tj 134.0002 0 TD (com )Tj -1534 99 TD (m)Tj 66.9999 0 TD (unication)Tj 418 0 TD (The)Tj 178 0 TD -0.0001 Tc (RPC)Tj 212 0 TD 0 Tc (XID)Tj 191 0 TD (issue)Tj 206 0 TD (also)Tj 174.0001 0 TD (applied)Tj -1446 100 TD (to)Tj 107 0 TD (the)Tj 147.9999 0 TD (NFS)Tj 196 0 TD [(co)-2000(de)]TJ 197 0 TD (w)Tj 58 0 TD (e)Tj 70 0 TD (encoun)Tj 252 0 TD (tered)Tj 241 0 TD -0.0001 Tc (and)Tj 166.9999 0 TD 0 Tc (w)Tj 58.0002 0 TD (e)Tj 70 0 TD -0.0002 Tc (no)Tj 86 0 TD 0 Tc (w)Tj -1650 100 TD [(use)-26999.9(t)-0.1(he)-28000(same)-27000(mec)]TJ 634.9999 0 TD [(hanism)-28000(for)-26999.9(NFS)-28000.1(XIDs)]TJ /T8 1 Tf -718 170 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(Ino)-1999.9(d)-0.1(e)-28000(g)0.1(eneration)-26000(n)]TJ 681.0001 0 TD (um)Tj 112.9999 0 TD 2 Tc [(be)2000(r)2000.1(s)1999.8()]TJ -793.9999 135.0001 TD 0 Tc (The)Tj /T7 1 Tf 242.9999 0 TD (fsir)Tj 115 0 TD (and)Tj /T6 1 Tf 342 0 TD (program)Tj 405 0 TD (mak)Tj 153.0001 0 TD -0.0002 Tc (es)Tj 169 0 TD 0 Tc (use)Tj 214.9998 0 TD 0.0002 Tc (of)Tj /T7 1 Tf -1641.9998 100 TD -0.0001 Tc (ar)Tj 72.9999 0 TD 0.0001 Tc (cr)Tj 111.0001 0 TD 0 Tc (andom)Tj /T6 1 Tf 428.0001 0 TD -0.0001 Tc (to)Tj 147.9999 0 TD 0 Tc (generate)Tj 379.0001 0 TD -0.0001 Tc (random)Tj /T9 1 Tf 352 0 TD 0 Tc (inode)Tj /T6 1 Tf -1491 100 TD (n)Tj 44 0 TD -0.0001 Tc (um)Tj 113 0 TD 1.9999 Tc [(be)1999.9(r)1999.8(s)]TJ 207.9999 0 TD 0 Tc (for)Tj 157 0 TD (lesystem)Tj 411.0001 0 TD [(ob)-5000(jects)]TJ 313.9999 0 TD (les)Tj 259.0001 0 TD (direc )Tj -1506 99.0001 TD (tories)Tj /T7 1 Tf 276.9999 0 TD (etc )Tj /T6 1 Tf 129.0001 0 TD -0.0001 Tc ()Tj 159 0 TD 0 Tc (This)Tj 210.9999 0 TD (increases)Tj 369.0001 0 TD -0.0001 Tc (the)Tj 165 0 TD 0 Tc (securit)Tj 238.9998 0 TD (y)Tj 93 0 TD 0.0002 Tc (of)Tj /T9 1 Tf 391.0002 -5349 TD 0 Tc (struct)Tj 305 0 TD (timeval)Tj 348.9998 0 TD 0.0001 Tc (now)Tj -653.9998 199 TD 0 Tc (gettimeofday now)Tj 747 0 TD -0.0002 Tc ()Tj -747 100 TD 0 Tc (callmsg rmxid)Tj 698 0 TD ()Tj 87 0 TD (getpid )Tj 391.9998 0 TD ()Tj 87 0 TD 0.0001 Tc (now tvsec)Tj 480.0002 0 TD 0 Tc ()Tj -959 99 TD (now tvusec)Tj /T6 1 Tf -883.0002 266 TD 0.0001 Tc [(Figure)-26999.7()]TJ /T10 1 Tf 364 0 TD 0 Tc (T)Tj 63 0 TD 0.0001 Tc (ypical)Tj 278.0002 0 TD 0 Tc [(RPC)-31000(Initialization)-31000(Co)-2999.5(de)]TJ /T6 1 Tf -615 270 TD [(NFS exp)-2000(orted)-25999.8(lesystems)-24999.8(b)]TJ 991 0 TD [(y)-24999.8(m)-0.2(aking)-25000(i)0.5(t)-26000.5(dicult)]TJ -991 100 TD -0.0001 Tc (for)Tj 133 0 TD 0 Tc (an)Tj 120.9998 0 TD 0.0001 Tc (attac)Tj 183 0 TD 0 Tc (k)Tj 42 0 TD -0.0001 Tc [(er)-31000.3(to)]TJ 208 0 TD 0 Tc (guess)Tj 224 0 TD (lehandles)Tj 412.0002 0 TD (whic)Tj 196 0 TD (h)Tj 79 0 TD (are)Tj -1598 99 TD [(partially)-26999.8(d)-0.2(eriv)]TJ 515.9998 0 TD [(ed)-26000.2(from)-27999.8(ino)-1999.8(d)-0.2(e)-27000(n)]TJ 573.0002 0 TD -0.0002 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)0.2(rs)]TJ /T8 1 Tf -1285.0002 176 TD ( )Tj /T6 1 Tf 83.0002 0 TD [(IP)-27000.2(datagram)-26000(IDs)]TJ 0 138 TD -0.0001 Tc (Eac)Tj 134 0 TD 0 Tc (h)Tj 100.9998 0 TD 0.0002 Tc (IP)Tj 143 0 TD 0 Tc (pac)Tj 123.0002 0 TD (k)Tj 42 0 TD (et)Tj 124 0 TD (con)Tj 122.9998 0 TD 0.0001 Tc (tains)Tj 232 0 TD 0 Tc (a)Tj 98.0002 0 TD ( bit)Tj 268 0 TD (iden)Tj 149.9995 0 TD 0.0001 Tc (tier)Tj -1537.9995 99 TD -0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 95.9998 0 TD 0.0002 Tc (is)Tj 105.0002 0 TD 0 Tc (used)Tj 241 0 TD -0.0002 Tc (if)Tj 97.9998 0 TD 0.0001 Tc (the)Tj 165.0002 0 TD 0 Tc (pac)Tj 123 0 TD (k)Tj 41.9998 0 TD (et)Tj 118.0002 0 TD -0.0001 Tc (has)Tj 170 0 TD 0 Tc [(b)-2000(een)]TJ 217.9995 0 TD 0.0001 Tc (frag )Tj -1539.9995 100 TD 0 Tc (men)Tj 150 0 TD [(ted)-28999.8(for)-27000(c)0(orrectly)-27000(p)-1999.8(e)0(rforming)-27000(reassem)]TJ 1346 0 TD -0.0003 Tc [(bly)-26000.8(a)-0.3(t)]TJ -1496 100 TD 0 Tc (the)Tj 157 0 TD -0.0001 Tc (nal)Tj 198 0 TD 0 Tc (destination)Tj 503.9998 0 TD (Previously)Tj 375 0 TD ()Tj 66.0002 0 TD (this)Tj 176 0 TD (iden)Tj 150 0 TD (ti )Tj -1626 99 TD [(er)-19999.8(simply)-21000(incremen)]TJ 721 0 TD -0.0001 Tc [(ted)-20000.3(e)-0.1(v)]TJ 213.9998 0 TD 21 Tc [(e)21000(r)20999.8(y)2000(t)21000(i)21000.2(m)20999.8(ea)1000.5(n)20999.5(e)21000(wp)21000(a)21000.5(c)]TJ 663.9998 0 TD 0 Tc (k)Tj 42.0005 0 TD (et)Tj -1641 100 TD (w)Tj 58 0 TD [(as)-31000(sen)]TJ 219.9998 0 TD 31 Tc [(to)30999.8(u)31000.2(t)31000()]TJ 255.0002 0 TD 0 Tc [(By)-31000(lo)-2000(oking)-30999.8(at)-31000(the)-32000(i)0.2(den)]TJ 831 0 TD -0.0001 Tc [(tier)-32000.1(in)-31000.6(a)]TJ -1364 100 TD 0 Tc [(sequence)-28000(of)-29000(pac)]TJ 564 0 TD (k)Tj 42 0 TD [(ets)-27999.8(an)-27999.8(outsider)-29000(can)-27999.5(d)-0.5(etermine)]TJ -606 98.9998 TD (ho)Tj 85.9998 0 TD (w)Tj 98.0002 0 TD (busy)Tj 208 0 TD (the)Tj 154 0 TD (target)Tj 256.9998 0 TD 0.0001 Tc (mac)Tj 146 0 TD (hine)Tj 190.0002 0 TD 0 Tc (is)Tj 150 0 TD (Another)Tj 337 0 TD (is )Tj -1626 100 TD -0.0001 Tc [(sue)-21000.1(w)]TJ 195 0 TD -0.0002 Tc [(as)-21000.2(a)]TJ 136 0 TD 0 Tc (v)Tj 41.9998 0 TD [(oiding)-19000.2(disclosure)-21000(of)-21000(information)-21000(when)]TJ -372.9998 99 TD -0.0001 Tc (using)Tj 226 0 TD 0 Tc (IPsec)Tj 229 0 TD -0.0002 Tc (in)Tj 104.9998 0 TD 0 Tc (tunneling)Tj 378.0002 0 TD -0.0001 Tc [(mo)-2000.1(de)]TJ 257 0 TD -0.0002 Tc (as)Tj 110 0 TD 2 Tc [(pe)2000(r)]TJ 154 0 TD -0.0001 Tc (section)Tj -1459 100 TD 0 Tc ( )Tj 251 0 TD (A)Tj 96.9998 0 TD (naiv)Tj 153.0002 0 TD (e)Tj 70.9998 0 TD (implemen)Tj 348.0002 0 TD (tation)Tj 250.9998 0 TD 0.0001 Tc (migh)Tj 177.9998 0 TD 0 Tc (t)Tj 67.0005 0 TD 0.0001 Tc (create)Tj 251 0 TD 0 Tc (a)Tj -1667 100 TD (new)Tj 177.9998 0 TD 0.0002 Tc (IP)Tj 121 0 TD 0 Tc (header)Tj 274 0 TD 0.0001 Tc (with)Tj 196.0002 0 TD -0.0002 Tc (an)Tj 122 0 TD 0 Tc (ID)Tj 128 0 TD (one)Tj 159 0 TD (more)Tj 215 0 TD -0.0002 Tc (than)Tj 201 0 TD 0 Tc (the)Tj -1594 99 TD [(ID)-24000(in)-23999.8(the)-23999.8(e)0(xisting)-23000.2(I)0(P)-23000(header)]TJ 1060.9998 0 TD [(This)-24000(could)-23000(lead)-23000(to)]TJ -1060.9998 100 TD (kno)Tj 129.9998 0 TD (wn plain)Tj 312.0002 0 TD [(text)-26000(attac)]TJ 354 0 TD -0.0001 Tc [(ks)-27000.1()]TJ 168 0 TD 0 Tc [()-27999.8(a)-0.2(gainst)-26999.8(IPsec)]TJ -964 138 TD (T)Tj 53 0 TD (o)Tj 98 0 TD (a)Tj 39.9998 0 TD (v)Tj 42.0002 0 TD -0.0001 Tc (oid)Tj 164.9998 0 TD 0 Tc (these)Tj 241.0002 0 TD (problems)Tj 415 0 TD (w)Tj 57.9998 0 TD (e)Tj 92.0002 0 TD (use)Tj 172 0 TD (the)Tj 172 0 TD 0.0001 Tc (non )Tj -1548 99 TD 0 Tc [(rep)-2000(eating)-27000.2(PRNG)-28000.2(describ)-2000(e)0(d)-27000.2(i)0(n)-28000(s)0.2(ection)-27000(\012\012)]TJ /T8 1 Tf -83.0002 176 TD ( )Tj /T6 1 Tf 83.0002 0 TD (Randomness)Tj 492 0 TD (added)Tj 254 0 TD -0.0002 Tc (to)Tj 112 0 TD -0.0001 Tc (the)Tj 152.9998 0 TD 0.0001 Tc (TCP)Tj 214.0002 0 TD 0 Tc (ISS)Tj 160 0 TD (v)Tj 38.9995 0 TD 0.0003 Tc (alue)Tj 186.0005 0 TD 0 Tc (for)Tj -1610 100 TD [(protection)-27000(a)-0.2(gainst)-26000(sp)-2000.2(o)-2000(o)0.2(ng)-26999.8(attac)]TJ 1194 0 TD -0.0001 Tc (ks)Tj -1194 137 TD [(Inside)-23000.3(t)-0.1(he)-23000.3(k)]TJ 418 0 TD 0 Tc [(ernel)-23000(a)-23000(\012)0.2( bit)-22000(v)]TJ 561 0 TD [(ariable)-20999.8(called)]TJ /T7 1 Tf 498 0 TD (tcp)Tj ET q 3.12 0 0 -0.48 525.708 306.4081 cm /Im1 Do Q BT 0.12 0 0 -0.12 528.84 305.94 Tm (iss)Tj /T6 1 Tf -1616 100 TD (declares)Tj 345 0 TD -0.0001 Tc (the)Tj 173 0 TD 0 Tc (Initial)Tj 277 0 TD -0.0001 Tc (Send)Tj 232.9998 0 TD 0 Tc (Sequence)Tj 388.0002 0 TD -0.0003 Tc (Num)Tj 175 0 TD 1.9995 Tc [(be)1999(r)]TJ -1591 100 TD -0.0001 Tc (ISS)Tj 235.9998 0 TD 0.0002 Tc (to)Tj 124 0 TD 0.0001 Tc (use)Tj 165.0002 0 TD 0 Tc (on)Tj 136.9998 0 TD (the)Tj 165.0002 0 TD 0.0001 Tc (next)Tj 208.9998 0 TD (TCP)Tj 225 0 TD 0 Tc (\012 )Tj 179.0002 0 TD -0.0001 Tc (session)Tj -1440 99 TD 0 Tc [(The)-29999.8(p)-0.2(redictabilit)]TJ 614 0 TD 29 Tc [(yo)29000(fT)29000(C)29000.2(P)-1000(I)28999.8(S)29000(Sv)]TJ 566 0 TD 0 Tc [(alues)-30000(has)-29000(b)-1999.5(een)]TJ -1180 100 TD (kno)Tj 129.9998 0 TD 0.0001 Tc [(wn)-25999.7(to)-25999.7(b)-1999.9(e)-26999.9(a)-26000.1(s)0.1(ecurit)]TJ 651.0002 0 TD 0 Tc [(y)-26000(p)0.2(roblem)-26000(for)-26000(man)]TJ 673 0 TD 25.9995 Tc (yy)Tj 112 0 TD 0 Tc (ears)Tj -1566 99.0002 TD ( \015)Tj 106 0 TD -0.0002 Tc ()Tj 107 0 TD 0 Tc (T)Tj 58 0 TD (ypical)Tj 249 0 TD (systems)Tj 315.9998 0 TD (added)Tj 253.0002 0 TD (either)Tj 243 0 TD (\012 K)Tj 205.9995 0 TD -0.0001 Tc (K)Tj -1537.9995 99.9999 TD [(or)-22000.1( K)-21000.3(to)-23000.3(that)-24000.1(v)]TJ 621 0 TD 0 Tc [(alue)-23000(at)-23000.2(v)]TJ 306.9998 0 TD [(arious)-22000(dieren)]TJ 508.9998 0 TD [(t)-23000.5(t)0.5(imes)]TJ -1436.9995 100 TD [(Instead)-22000(our)-21000(new)-21000.2(algorithm)-20000.2(adds)-21000.2(a)-20999.8(xed)-22000(amoun)]TJ 1678 0 TD (t)Tj -1678 99 TD [(plus)-27000(a)-27000(random)-27000(amoun)]TJ 792 0 TD [(t)-26000(signican)]TJ 416.9998 0 TD [(tly)-27000(decreasing)]TJ -1208.9998 100 TD (the)Tj 153.9998 0 TD (c)Tj 35.0002 0 TD (hances)Tj 278 0 TD -0.0002 Tc (of)Tj 104.9998 0 TD 0.0002 Tc (an)Tj 126 0 TD 0.0001 Tc (attac)Tj 183.0002 0 TD 0 Tc (k)Tj 41.9998 0 TD (er)Tj 107.0002 0 TD (guessing)Tj 339 0 TD (the)Tj 153 0 TD (v)Tj 38.9995 0 TD 0.0001 Tc (alue)Tj -1560.9995 100 TD 0 Tc (and)Tj 172.9998 0 TD (th)Tj 76 0 TD 0.0002 Tc (us)Tj 117 0 TD 2.0002 Tc [(be)2000.2(i)2000.4(n)2000(g)]TJ 235.0002 0 TD 0 Tc (able)Tj 186 0 TD (to)Tj 112.9998 0 TD 2 Tc [(s)1999.8(poo)2000(f)]TJ 231.0002 0 TD 0 Tc (connection)Tj 426 0 TD 0.0001 Tc (con )Tj -1557 99.0001 TD 0 Tc (ten)Tj 113 0 TD -0.0001 Tc (ts)Tj /T8 1 Tf -196.0002 175.9999 TD 0 Tc ( )Tj /T6 1 Tf 83.0002 0 TD -0.0001 Tc (Random)Tj 339 0 TD [(data blo)-2000.3(c)]TJ 338 0 TD 0 Tc [(k)-31000(p)0.2(adding)]TJ 399 0 TD [(for)-32000(cryptographic)]TJ -1076 100 TD [(transforms)-25999.8(as)-27000.2(in)-28000(RF)]TJ 748.9998 0 TD [(C )-26000(I)-0.2(Psec)-26000(ESP)-27000( )]TJ /T10 1 Tf -914.9998 228.0001 TD ( )Tj 292 0 TD (Randomness)Tj 594 0 TD -0.0001 Tc (Used)Tj 278.9998 0 TD 0.0002 Tc (in)Tj 150 0 TD 0 Tc (Userland)Tj 444.0002 0 TD (Li)Tj -1467 100 TD (braries)Tj /T8 1 Tf -209.0002 157.9999 TD ( )Tj /T6 1 Tf 83.0002 0 TD (DNS)Tj 206 0 TD -0.0001 Tc (query)Tj 237 0 TD (IDs)Tj 160.9998 0 TD 0 Tc (t)Tj 30 0 TD (ypically)Tj 315 0 TD (start)Tj 205.0002 0 TD -0.0002 Tc (at)Tj 107.9998 0 TD 0 Tc ()Tj 76.0002 0 TD (and)Tj 168 0 TD (incre )Tj -1506 99.0001 TD (men)Tj 150 0 TD (t)Tj 69 0 TD -0.0001 Tc (for)Tj 137 0 TD (eac)Tj 114 0 TD 0 Tc (h)Tj 82 0 TD (subsequen)Tj 366 0 TD (t)Tj 67.9998 0 TD (query)Tj 197.0002 0 TD ()Tj 87 0 TD (An)Tj 146 0 TD -0.0001 Tc (attac)Tj 182.9995 0 TD 0 Tc (k)Tj 42.0005 0 TD (er)Tj ET endstream endobj 36 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /T6 9 0 R /T7 10 0 R /T8 11 0 R /T9 17 0 R /T10 18 0 R >> /XObject << /Im1 23 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 38 0 obj << /Length 20649 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 91.92 709.14 Tm 0 g /GS1 gs 0 Tc 0 Tw (can)Tj 158.9999 0 TD (cause)Tj 228.0002 0 TD (a)Tj 75.9999 0 TD (DNS)Tj 206 0 TD [(lo)-2000(okup)]TJ /T7 1 Tf 303 0 TD (e g )Tj /T6 1 Tf 189 0 TD (b)Tj 44 0 TD (y)Tj 78.0001 0 TD (telneting)Tj 351.9998 0 TD (to)Tj -1634.9998 100 TD (the)Tj 148.9999 0 TD [(target)-32000(host)]TJ 461 0 TD (and)Tj 167.0001 0 TD -0.0001 Tc [(sp)-2000.2(o)-2000.1(o)0(f)]TJ 225 0 TD (the)Tj 148.9999 0 TD 0 Tc (reply)Tj 176.0001 0 TD ()Tj 57.9998 0 TD (since)Tj 209.0002 0 TD (the)Tj -1594 99 TD (con)Tj 122.9999 0 TD (ten)Tj 113 0 TD (t)Tj 64.0001 0 TD -0.0001 Tc (of)Tj 100 0 TD 0 Tc (the)Tj 147.9999 0 TD [(query)-31000.1(and)]TJ 402 0 TD (the)Tj 148 0 TD (ID)Tj 126 0 TD [(are)-30999.8(kno)]TJ 273.0001 0 TD 0.0001 Tc [(wn)-31999.7(or)]TJ -1497 100 TD 0 Tc [(easily)-29000.1(predictable)]TJ 698.9999 0 TD [(Since)-29000(host)-30000(authen)]TJ 648.0001 0 TD [(tication)-29000(is)]TJ -1347 100 TD (still)Tj 169 0 TD -0.0001 Tc (in)Tj 103.9999 0 TD 0 Tc (wide spread)Tj 464 0 TD (use)Tj 176 0 TD 0.0001 Tc (this)Tj 169 0 TD 0 Tc (is)Tj 90 0 TD (a)Tj 76 0 TD -0.0001 Tc (serious)Tj 280.9999 0 TD 0.0001 Tc (secu )Tj -1528.9998 99 TD -0.0001 Tc (rit)Tj 85.9999 0 TD 0 Tc (y)Tj 86.0001 0 TD (vulnerabilit)Tj 415.9999 0 TD (y)Tj 86 0 TD (presen)Tj 230 0 TD (t)Tj 74 0 TD (in)Tj 112.0001 0 TD (virtually)Tj 351.9998 0 TD 0.0001 Tc (all)Tj 130.0002 0 TD (sys )Tj -1572 100 TD 0 Tc (tems)Tj 229.9999 0 TD (T)Tj 53 0 TD 25.0001 Tc (oa)Tj 107 0 TD 0 Tc (v)Tj 42 0 TD [(oid)-23000(this)-25000(issue)-25000.1(w)]TJ 571 0 TD 24.0001 Tc [(eh)24000.2(a)]TJ 147 0 TD 0 Tc (v)Tj 42 0 TD [(e)-24000(m)0(o)-2000(d)0.2(ied)-25000.2(our)]TJ -1192 100 TD [(in tree)-31000(cop)]TJ 389.9999 0 TD 31.0001 Tc [(yo)31000.2(f)]TJ /T7 1 Tf 173 0 TD 0 Tc (bind)Tj /T6 1 Tf 295.0001 0 TD [(and)-31999.9(our)]TJ /T7 1 Tf 316.9999 0 TD 0.0001 Tc (lib)Tj 80 0 TD 0 Tc (c)Tj /T6 1 Tf 70.9999 0 TD (resolv)Tj 210 0 TD [(er)-29000(to)]TJ -1535.9998 99 TD -0.0001 Tc (mak)Tj 153 0 TD 0 Tc [(e)-26999.9(use)-27000(of)-28000(the)-28000(non rep)-2000(eating)-25999.9(PRNG)]TJ /T8 1 Tf -236.0001 166 TD ( )Tj /T7 1 Tf 83.0001 0 TD -0.0001 Tc (ar)Tj 72.9999 0 TD 0.0001 Tc (cr)Tj 111.0001 0 TD 0 Tc (andom)Tj /T6 1 Tf 375.9999 0 TD [(seeding)-24000.1(as)-22000(men)]TJ 557.9999 0 TD [(tioned)-23000(i)-0.2(n)-23000(s)0.2(ection)]TJ -1117.9998 100 TD (\012 )Tj /T8 1 Tf -83.0001 166 TD ( )Tj /T6 1 Tf 83.0001 0 TD [(Stronger)-26000(temp)-2000(orary)-27000(n)-0.1(ames)]TJ 0 133 TD [(Pro)-1999.9(c)-0.1(esses)]TJ 388.9999 0 TD (t)Tj 30 0 TD (ypically)Tj 328 0 TD (create)Tj 263 0 TD [(temp)-2000.1(orary)]TJ 425.9999 0 TD (les)Tj 185.0002 0 TD (b)Tj 44 0 TD (y)Tj -1665 98.9995 TD (generating)Tj 420.9999 0 TD (a)Tj 84 0 TD (random)Tj 319 0 TD (lename)Tj 342 0 TD 0.0001 Tc (via)Tj /T7 1 Tf 150.0001 0 TD 0 Tc (mktemp)Tj /T6 1 Tf -1316 100.0005 TD (and)Tj 184 0 TD (then)Tj 211.9999 0 TD [(op)-2000(ening)]TJ 333 0 TD (that)Tj 203 0 TD (le)Tj 156 0 TD (in)Tj 119 0 TD 0.0001 Tc (the)Tj 165.9999 0 TD (tmp)Tj 239 0 TD (di )Tj -1611.9998 100 TD 0 Tc (rectory)Tj 250.9999 0 TD ()Tj 110 0 TD (A)Tj 108 0 TD (more)Tj 225 0 TD (secure)Tj 267 0 TD (w)Tj 58 0 TD (a)Tj 40 0 TD (y)Tj 87.0001 0 TD -0.0001 Tc (for)Tj 145 0 TD (doing)Tj 243 0 TD -0.0002 Tc (so)Tj 119 0 TD 0 Tc (is)Tj -1653 99 TD (through)Tj /T7 1 Tf 320.9999 0 TD (mkstemp)Tj /T6 1 Tf 488.0001 0 TD -0.0001 Tc (whic)Tj 163.9999 0 TD 0 Tc (h)Tj 80 0 TD (generates)Tj 371.9999 0 TD 0.0001 Tc (the)Tj 150 0 TD (le )Tj -1574.9998 100 TD 0 Tc (name)Tj 229.9999 0 TD (and)Tj 169 0 TD [(op)-2000(ens)]TJ 242 0 TD (the)Tj 151 0 TD (le)Tj 142 0 TD (in)Tj 106.0001 0 TD -0.0001 Tc (one)Tj 159.9999 0 TD 0.0001 Tc (atomic)Tj 279.9999 0 TD [(op)-1999.9(era )]TJ -1479.9998 99 TD 0 Tc (tion)Tj 209 0 TD (th)Tj 75.9999 0 TD 0.0001 Tc (us)Tj 118.0001 0 TD 0 Tc (eliminating)Tj 445.9999 0 TD 0.0001 Tc (the)Tj 155 0 TD 0 Tc [(p)-2000.1(o)0.1(ten)]TJ 203 0 TD -0.0001 Tc (tial)Tj 159.0001 0 TD 0 Tc (for)Tj 138.9998 0 TD (races)Tj -1504.9998 100 TD [(Both)-26000(functions)-28000(whic)]TJ 749.9999 0 TD [(h)-26000(reside)-26000(in)]TJ /T9 1 Tf 403 0 TD (libc)Tj /T6 1 Tf 175.9999 0 TD [()-25000.2(mak)]TJ 201 0 TD 26 Tc [(eu)25999.8(s)26000(e)]TJ -1529.9998 100 TD -0.0001 Tc (of)Tj /T7 1 Tf 100 0 TD (ar)Tj 72.9999 0 TD 0.0001 Tc (cr)Tj 111.0001 0 TD 0 Tc (andom)Tj /T6 1 Tf 386.9999 0 TD (to)Tj 107 0 TD [(generate)-32000(the)]TJ 487 0 TD [(random)-32000(le )]TJ -1265 99 TD (names)Tj 282.9999 0 TD (making)Tj 298.0001 0 TD -0.0001 Tc (it)Tj 87.9999 0 TD 0 Tc (m)Tj 67 0 TD (uc)Tj 81 0 TD [(h)-32000(h)0(arder)]TJ 347.0001 0 TD -0.0001 Tc (for)Tj 132 0 TD 0 Tc [(an)-32000(attac)]TJ 302.9998 0 TD (k)Tj 42 0 TD 0.0002 Tc (er)Tj -1640.9998 100 TD 0 Tc [(to)-27999.9(guess)-26000(the)-28000.1(names)-26999.9(i)-0.1(n)-27999.9(adv)]TJ 940.0001 0 TD (ance)Tj /T8 1 Tf -1023.0001 165.9998 TD ( )Tj /T6 1 Tf 83.0001 0 TD (Generate)Tj 367.9999 0 TD (salts)Tj 203 0 TD (for)Tj 139 0 TD (the)Tj 156 0 TD (v)Tj 39 0 TD (arious)Tj 258 0 TD -0.0001 Tc (passw)Tj 211.9999 0 TD 0 Tc (ord)Tj 159.0002 0 TD (algo )Tj -1534 100 TD (rithms)Tj 295.9999 0 TD (F)Tj 47 0 TD [(or)-27000(some)-27000(more)-27000(details)-27000(see)-27000(section)-28000.2()0()]TJ /T10 1 Tf -509 215.0002 TD ()Tj 292.0001 0 TD (Randomness)Tj 576.9999 0 TD (Used)Tj 262.0001 0 TD -0.0001 Tc (in)Tj 132.9999 0 TD (Userland)Tj 426.9999 0 TD 0.0001 Tc (Pro)Tj -1398.9998 100 TD 0 Tc (grams)Tj /T8 1 Tf -209.0001 152.9998 TD ( )Tj /T6 1 Tf 83.0001 0 TD (F)Tj 47 0 TD [(or)-27000(generating)-25999.9(fak)]TJ 616.9999 0 TD [(e)-27000(SKey)-27000.1(c)]TJ 360 0 TD (hallenges)Tj -1023.9999 133.0002 TD -0.0001 Tc (One)Tj 182 0 TD 0 Tc (problem)Tj 330.0001 0 TD (with)Tj 197 0 TD (most)Tj 209.9999 0 TD (v)Tj 42 0 TD (ersions)Tj 280 0 TD (of)Tj 100.9999 0 TD 0.0002 Tc (RF)Tj 113 0 TD 0.0001 Tc (C\012 )Tj -1454.9998 100 TD 0 Tc [(based)-22000(one)-21000(time)-23000.1(passw)]TJ 767.9999 0 TD [(ord)-20000(OTP)-21000(systems)-22000(is)-22000(that)]TJ -767.9999 99 TD (it)Tj 95.9999 0 TD 0.0001 Tc (is)Tj 96 0 TD 0 Tc (often)Tj 223 0 TD [(p)-2000(ossible)]TJ 325.0001 0 TD -0.0001 Tc (to)Tj 113.9999 0 TD 0.0001 Tc (use)Tj 156 0 TD 0 Tc (them)Tj 225 0 TD (to)Tj 114.0001 0 TD (determine)Tj -1349 100 TD [(whether)-28000(or)-27000(not)-27999.9(a)-27000(user)-28000.1(has)-27000(a)0(n)-27000(a)-0.1(ccoun)]TJ 1325.9998 0 TD [(t)-28000(o)-0.2(n)-27000(a)-28000(ma )]TJ -1325.9998 100 TD (c)Tj 35 0 TD (hine)Tj 224.0001 0 TD [(The)-31000(most)-31000.1(trivial)-31000.1(example)-31000(of)-32000(this)-31999.8(is)-31000(sys )]TJ -259.0001 99 TD [(tems)-24999.9(that)-25000(pro)]TJ 491.9999 0 TD [(vide)-23000.1(a)-23999.8(d)-0.2(ieren)]TJ 507 0 TD [(t)-25000(p)-0.1(rompt)-24000(i)-0.2(f)-25000(t)0(he)-25000(user)]TJ -998.9999 100 TD (has)Tj 156 0 TD -0.0001 Tc (an)Tj 122.9999 0 TD 0 Tc (en)Tj 81 0 TD 0.0001 Tc (try)Tj 144 0 TD 0 Tc (in)Tj 105.0001 0 TD (the)Tj 150.9999 0 TD (OTP)Tj 217.0001 0 TD (database)Tj 401.9998 0 TD 0.0002 Tc (Ho)Tj 102.0002 0 TD 0 Tc (w)Tj 58 0 TD (ev)Tj 78.9998 0 TD 0.0001 Tc (er)Tj -1617.9998 99 TD -0.0001 Tc (ev)Tj 79 0 TD 0 Tc (en)Tj 116.9999 0 TD (for)Tj 134 0 TD (systems)Tj 315 0 TD (that)Tj 185.9999 0 TD 0.0001 Tc (alw)Tj 123.0001 0 TD 0 Tc (a)Tj 40 0 TD (ys)Tj 110 0 TD 0.0001 Tc (pro)Tj 119 0 TD -0.0001 Tc (vide)Tj 183.0001 0 TD -0.0002 Tc (an)Tj 122 0 TD 0 Tc (OTP)Tj -1528 100 TD (prompt)Tj 328.0001 0 TD (the)Tj 150 0 TD (prompt)Tj 302.9998 0 TD (itself)Tj 209.0002 0 TD -0.0001 Tc (is)Tj 90.9999 0 TD 0 Tc (rarely)Tj 244.9999 0 TD (con)Tj 123 0 TD (vincing)Tj -1448.9998 100 TD [(and)-26999.9(c)0(an)-26000.1(b)-2000(e)-27000(trivially)-26000(iden)]TJ 886.9998 0 TD 0.0001 Tc [(tied)-26999.9(as)-25999.9(a)-25999.9(f)0.3(ak)]TJ 489.0002 0 TD 0 Tc (e)Tj 96 0 TD (T)Tj 52.9998 0 TD 27.0002 Tc [(oa)27000.4(d)27000( )]TJ -1524.9998 98.9999 TD 0 Tc [(dress)-25000.1(t)0.1(his)-26000(problem)-26000.1(the)-25999.9(OTP)-25000(co)-2000(de)-26000(in)-26000(Op)-2000.2(enBSD)]TJ 0 100 TD (generates)Tj 384.0001 0 TD (a)Tj 87.9999 0 TD (consisten)Tj 327 0 TD -0.0001 Tc (t)Tj 106 0 TD 0 Tc (credible)Tj 328.0001 0 TD (c)Tj 34.9999 0 TD (hallenge)Tj 341.9999 0 TD 0.0001 Tc (for)Tj -1609.9998 100 TD 0 Tc (non existen)Tj 412.0001 0 TD (t)Tj 66.9999 0 TD (users)Tj 216 0 TD 0.0001 Tc (and)Tj 169.0001 0 TD 0 Tc (users)Tj 215.9999 0 TD -0.0001 Tc (without)Tj 317.0001 0 TD 0 Tc (an)Tj 123 0 TD (en)Tj 81 0 TD -0.0001 Tc (try)Tj -1601 99 TD 0 Tc [(in)-28999.9(the)-29000(OTP)-27000(database)]TJ 833.0001 0 TD [(It)-28000(do)-2000(es)-29000(so)-27000(b)]TJ 425 0 TD [(y)-29000(g)0.2(enerating)]TJ -1258 100 TD [(the)-29000(prompt)-29000(based)-28000(o)-0.1(n)-29000(t)0.1(he)-29000(hostname)-28000.1(and)-29000(a)-27999.8(hash)]TJ 0 99 TD [(of)-30000.1(the)-29999.9(username)-29000(a)-0.1(nd)-29000.1(the)-31000(c)0(on)]TJ 1046 0 TD -0.0001 Tc (ten)Tj 112.9999 0 TD 0 Tc [(ts)-29000(of)-29000.2(a)-30000()0.2(le)-30000(gen )]TJ -1159 100 TD (erated)Tj 259.9999 0 TD (from)Tj 202.0001 0 TD (the)Tj 148.9999 0 TD (k)Tj 42 0 TD (ernel)Tj 208.9999 0 TD 0.0001 Tc (random)Tj 311.0001 0 TD 2 Tc [(poo)2000.2(l)2000()]TJ 234.0001 0 TD -0.0001 Tc (This)Tj 196 0 TD 0 Tc (le)Tj -1603 100 TD [(is)-25000(usually)-24000.1(created)-25000(at)-24999.9(install)-25000(time)-25000(and)-24999.8(p)-0.2(ro)]TJ 1460.9998 0 TD [(vides)-23000(a)]TJ -1460.9998 99.0001 TD (constan)Tj 275.9999 0 TD [(t)-21000(s)-0.1(ource)-21000(of)-22000(random)-21000(data)]TJ 910 0 TD 0.0001 Tc (Th)Tj 104.0001 0 TD 0 Tc [(us)-23000(a)0(ll)-21000(three)]TJ -1290 100 TD [(comp)-2000(onen)]TJ 364.9999 0 TD (ts)Tj 98 0 TD (of)Tj 100 0 TD (the)Tj 149.0001 0 TD (c)Tj 34.9999 0 TD [(hallenge)-32000(are)-32000(constan)]TJ 748.0001 0 TD (t)Tj 89 0 TD (but)Tj -1584 100 TD [(only)-28000(the)-28000(hostname)-28000(and)-27999.9(username)-27000.1(are)-27000(k)0(no)]TJ 1502 0 TD -0.0001 Tc [(wn)-27000.1(to)]TJ -1502 99.0001 TD 0 Tc [(the)-27999.9(attac)]TJ 325.9999 0 TD (k)Tj 42 0 TD (er)Tj /T8 1 Tf 1573.9999 -5317 TD ( )Tj /T7 1 Tf 83.0002 0 TD (isakmp)Tj 245 0 TD (d)Tj /T6 1 Tf 76.9998 0 TD (and)Tj /T7 1 Tf 166.0002 0 TD (photurisd)Tj /T6 1 Tf 369 0 TD -0.0001 Tc (use)Tj 149 0 TD (the)Tj 148 0 TD 0 Tc (k)Tj 41.9998 0 TD -0.0001 Tc (ernel)Tj 208.0002 0 TD 0.0001 Tc (random )Tj -1404 100 TD 0 Tc [(ness)-28000.2(p)-2000(o)-2000(o)0.2(l)-29000.2(for)-27999.8(generating)-26999.8(IKE)-27999.8()-0.2(exc)]TJ 1235.9998 0 TD [(hange)-27000.5(i)0.5(den)]TJ 390.0002 0 TD (ti )Tj -1626 99 TD [(ers)-29000.2()]TJ /T7 1 Tf 252 0 TD (i e )Tj /T6 1 Tf 171.9998 0 TD [(proto)-2000(col)-29000(co)-2000(okies)-29000(and)-31000(message)-29000.5(IDs)]TJ -423.9998 100 TD [(random)-31999.8(Die Hellman)]TJ 866 0 TD ()Tj 120.9998 0 TD (v)Tj 39.0002 0 TD (alues)Tj 238.9998 0 TD (and)Tj 167.0002 0 TD 0.0001 Tc (random)Tj -1432 100 TD 0 Tc (nonces)Tj /T8 1 Tf -83.0002 177 TD ( )Tj /T6 1 Tf 83.0002 0 TD [(Certain)-30999.8(g)-0.2(ames)-31000(mak)]TJ 710.9998 0 TD [(e)-31000(u)-0.2(se)-31000(of)-32000(the)]TJ /T7 1 Tf 461 0 TD 0.0002 Tc (ar)Tj 73.0002 0 TD 0 Tc (cr)Tj 111 0 TD (andom)Tj /T6 1 Tf -1356 100 TD -0.0002 Tc (in)Tj 66.9998 0 TD 0 Tc [(terface)-27000(for)-27000.2(higher)-27000(qualit)]TJ 859.0002 0 TD [(y)-26999.8(r)-0.2(andom)-26999.8(n)]TJ 420 0 TD (um)Tj 113 0 TD [(b)-2000(ers)]TJ /T1 1 Tf -1625 324 TD ()Tj 168 0 TD (Secure)Tj 359.9998 0 TD (Storage)Tj /T6 1 Tf -445 207 TD [(One)-19000(o)0(f)-19000(t)0(he)-20000.2(areas)-18000(o)-0.2(f)-19000(least)-19000(dev)]TJ 990.0002 0 TD (elopmen)Tj 298 0 TD [(t)-19000(i)0(n)-20000(O)0(p)-2000(enBSD)]TJ -1371 100 TD [(has)-28000.2(b)-2000(een)-28000(t)0(hat)-29000(o)-0.2(f)-28000(secure)-28000.2(storage)]TJ 1192 0 TD [(While)-29000(a)-28000(n)]TJ 357 0 TD (um)Tj 113 0 TD 2 Tc [(be)2000(r)-26000(o)2000(f)]TJ -1662 99 TD 0 Tc (utilities)Tj 312 0 TD ()Tj /T7 1 Tf 31.9998 0 TD (e g )Tj 196 0 TD (vi )Tj 243.0002 0 TD (e)Tj 34 0 TD -0.0001 Tc (d )Tj 220.9998 0 TD 0 Tc (b)Tj 34.0002 0 TD (des )Tj 292.9998 0 TD 0.0001 Tc (etc )Tj /T6 1 Tf 129.0002 0 TD 0 Tc ()Tj 106 0 TD (directly)Tj -1600 100 TD [(supp)-2000(ort)]TJ 314.9998 0 TD (encryption)Tj 420.0002 0 TD (services)Tj 335 0 TD (our)Tj 154.9998 0 TD -0.0001 Tc (goal)Tj 183.0002 0 TD -0.0002 Tc (is)Tj 91 0 TD 0 Tc (to)Tj 108 0 TD (pro)Tj 119 0 TD (vide)Tj -1726 100 TD -0.0001 Tc (this)Tj 176.9998 0 TD 0 Tc (service)Tj 286 0 TD 0.0002 Tc (as)Tj 118.0002 0 TD 0 Tc (transparen)Tj 387.9998 0 TD 0.0001 Tc (tly)Tj 140.0002 0 TD -0.0002 Tc (as)Tj 116.9998 0 TD 0 Tc [(p)-2000.2(ossible)]TJ 328.0002 0 TD (to)Tj 117 0 TD -0.0001 Tc (users)Tj -1671 99 TD 0 Tc (Ideally)Tj 237.9998 0 TD ()Tj 61.0002 0 TD (w)Tj 57.9998 0 TD (e)Tj 72.0002 0 TD (w)Tj 58 0 TD (ould)Tj 193 0 TD -0.0001 Tc (lik)Tj 88 0 TD 0 Tc (e)Tj 71.9998 0 TD (a)Tj 78.0002 0 TD (la)Tj 62.9998 0 TD (y)Tj 42.0002 0 TD (er)Tj 103.9998 0 TD (either)Tj 244.0002 0 TD (o)Tj 40 0 TD (v)Tj 41.9998 0 TD -0.0005 Tc (er)Tj 104.0002 0 TD 0 Tc (or)Tj 110 0 TD 0.0001 Tc (under)Tj -1667 100 TD 0 Tc [(the)-22000.2(c)0(urren)]TJ 367 0 TD -0.0001 Tc [(t)-20999.9(n)-0.3(ativ)]TJ 238 0 TD 0 Tc [(e)-20999.8()-0.2(lesystem)-21999.8(that)-21999.8(w)]TJ 666 0 TD -0.0001 Tc [(ould)-21000.1(pro)]TJ 297 0 TD [(vide)-20000.6(safe)]TJ -1568 99.9998 TD 0 Tc [(storage)-26000(s)0.2(ervices)]TJ 82.9998 102 TD 0.0001 Tc [(As)-27000.1(an)-26999.7(in)]TJ 304.0002 0 TD 0 Tc [(terim)-28000(solution)-27000(CFS)-27000()0.2(\015)-27000(is)-26999.8(included)-28000(in)-28000(the)]TJ -387 100.0002 TD -0.0001 Tc [(Op)-2000.1(enBSD)]TJ 406.9998 0 TD 0 Tc [(p)-2000.2(orts)]TJ 231 0 TD (system)Tj 290.0002 0 TD -0.0001 Tc (and)Tj 177 0 TD 0 Tc (can)Tj 167 0 TD 2 Tc (be)Tj 127.9998 0 TD 0 Tc (readily)Tj 289.9998 0 TD (used)Tj -1689.9995 98.9998 TD (Ho)Tj 101.9998 0 TD (w)Tj 58.0002 0 TD (ev)Tj 78.9998 0 TD 0.0001 Tc (er)Tj 144 0 TD 0.0002 Tc (it)Tj 103.0002 0 TD -0.0001 Tc [(do)-2000.1(es)]TJ 207 0 TD 0 Tc (not)Tj 167 0 TD -0.0001 Tc (pro)Tj 119 0 TD 0 Tc (vide)Tj 196.9998 0 TD 0.0001 Tc (the)Tj 163 0 TD (lev)Tj 102.0002 0 TD -0.0005 Tc (el)Tj 107 0 TD (of)Tj 114 0 TD 0.0001 Tc (trans )Tj -1662 100 TD 0 Tc [(parency)-32000(w)]TJ 375 0 TD (e)Tj 69.9998 0 TD (w)Tj 58 0 TD -0.0001 Tc (ould)Tj 190.0002 0 TD (lik)Tj 88 0 TD 0 Tc (e)Tj 93.9998 0 TD (and)Tj 167.0002 0 TD (its)Tj 121.9998 0 TD [(p)-2000(e)-0.2(rformance)-32000(is)]TJ 570.0002 0 TD (w)Tj 58 0 TD -0.0003 Tc (ell)Tj -1792 100 TD 2 Tc [(be)2000(l)2000.2(o)]TJ 148 0 TD 30.9998 Tc [(ww)30999.6(h)31000(a)30999.6(t)-1000(w)]TJ 361 0 TD 0 Tc [(e)-30999.8(c)0(onsider)-31000(acceptable)-30999.8(f)0(or)-31000(general)-30000(use)]TJ -509 99 TD (Clearly)Tj 255 0 TD [()-27000(more)-26000(w)]TJ 314.9998 0 TD [(ork)-27000.2(i)0.2(s)-27000.2(n)0.2(eeded)-28000(in)-28000(this)-28000(area)]TJ -487 103.0002 TD (Another)Tj 342.0002 0 TD (issue)Tj 216 0 TD (related)Tj 294 0 TD (to)Tj 117.9998 0 TD (secure)Tj 266.0002 0 TD (storage)Tj 304 0 TD (is)Tj 100 0 TD (that)Tj -1723 99 TD (of)Tj 112 0 TD (secure)Tj 267 0 TD -0.0001 Tc (logging)Tj 370.9998 0 TD 0.0001 Tc (Logs)Tj 213 0 TD (and)Tj 211.0002 0 TD 0 Tc [(esp)-2000.2(ecially)]TJ 390.9995 0 TD 0.0001 Tc (securit)Tj 239 0 TD 0.0005 Tc (y )Tj -1803.9995 100 TD 0 Tc (related)Tj 282.9998 0 TD 0.0001 Tc (logs)Tj 205 0 TD 0 Tc (are)Tj 145.0002 0 TD (extremely)Tj 390 0 TD -0.0001 Tc [(imp)-2000.1(o)-0.3(rtan)]TJ 332.9998 0 TD 0 Tc (t)Tj 65.0002 0 TD (in)Tj 103 0 TD (determin )Tj -1524 99 TD (ing)Tj 148 0 TD (whether)Tj 327 0 TD (a)Tj 79 0 TD (system)Tj 283.9998 0 TD 0.0002 Tc (is)Tj 93 0 TD 0 Tc (under)Tj 245 0 TD 0.0001 Tc (attac)Tj 183.0002 0 TD 0 Tc (k)Tj 78.9998 0 TD (or)Tj 111.0002 0 TD (has)Tj 158 0 TD 1.9995 Tc [(be)1999(e)2000(n)]TJ -1707 100 TD 0 Tc (compromised)Tj 567 0 TD (The)Tj 180 0 TD (curren)Tj 229.9998 0 TD (t)Tj 69.0002 0 TD (logging)Tj 297 0 TD (facilit)Tj 203 0 TD (y)Tj 37 0 TD ()Tj /T7 1 Tf 63 0 TD (syslo)Tj 167 0 TD (g)Tj /T6 1 Tf 38 0 TD ()Tj -1851 100 TD -0.0001 Tc [(do)-2000.1(es)]TJ 207.9998 0 TD 0 Tc (not)Tj 167.0002 0 TD (pro)Tj 118.9998 0 TD -0.0001 Tc (vide)Tj 197.0002 0 TD 0 Tc (an)Tj 85.9998 0 TD (y)Tj 91.0002 0 TD (facilities)Tj 345.9998 0 TD (for)Tj 147.0002 0 TD (detecting)Tj 380 0 TD (log )Tj -1741 98.9998 TD [(tamp)-2000(ering)]TJ 430 0 TD (other)Tj 222.9998 0 TD 0.0001 Tc (than)Tj 199 0 TD (the)Tj 149 0 TD (option)Tj 265.0002 0 TD 0 Tc (to)Tj 107 0 TD -0.0001 Tc (send)Tj 196 0 TD 0 Tc [(log)-32000(mes )]TJ -1569 100 TD (sages)Tj 224 0 TD (to)Tj 113 0 TD (another)Tj 314.9998 0 TD (hosts)Tj /T7 1 Tf 248 0 TD (syslo)Tj 167.0002 0 TD (gd )Tj /T6 1 Tf 176 0 TD (W)Tj 78 0 TD (e)Tj 76 0 TD -0.0001 Tc (are)Tj 150 0 TD 0 Tc (curren)Tj 229.9995 0 TD 0.0003 Tc (tly)Tj -1776.9995 100 TD 2 Tc [(po)2000.2(r)1999.8(t)2000(i)2000.2(n)1999.8(g)]TJ 300.9998 0 TD 0.0001 Tc (the)Tj /T7 1 Tf 150 0 TD 0 Tc (ssyslo)Tj 201 0 TD (g)Tj /T6 1 Tf 74 0 TD (pac)Tj 123.0002 0 TD (k)Tj 38.9998 0 TD 0.0001 Tc (age)Tj 154.0002 0 TD 0 Tc (\012)Tj 106 0 TD ()Tj 59 0 TD (and)Tj 168.9998 0 TD (are)Tj 146.0002 0 TD (hoping)Tj 279 0 TD (to)Tj -1801 99 TD [(seamlessly)-26000(replace)-26999.8(t)0(he)-27999.8(curren)]TJ 1055 0 TD (tly used)Tj /T7 1 Tf 315 0 TD 0.0001 Tc (syslo)Tj 167 0 TD 0 Tc (gd )Tj /T6 1 Tf -1454.0002 103.0002 TD (The)Tj 181 0 TD (remainder)Tj 403.0002 0 TD (of)Tj 104 0 TD (this)Tj 172 0 TD (section)Tj 287.9998 0 TD (briey)Tj 266.0002 0 TD (co)Tj 77 0 TD (v)Tj 42 0 TD (ers)Tj 138.9995 0 TD 0.0003 Tc (our)Tj /T7 1 Tf -1754.9995 98.9998 TD 0 Tc (b)Tj 33.9998 0 TD (crypt)Tj /T6 1 Tf 183.0002 0 TD ()Tj 60.9998 0 TD (approac)Tj 286 0 TD (h)Tj 79.0002 0 TD -0.0002 Tc (to)Tj 108.9998 0 TD 0 Tc (protecting)Tj 405.0002 0 TD (user)Tj 182.9998 0 TD 0.0001 Tc (passw)Tj 212.0002 0 TD -0.0001 Tc (ords)Tj 212 0 TD 0 Tc (de )Tj -1764 100 TD (v)Tj 42 0 TD [(elop)-2000(ed)-26999.8(inside)-27999.8(Op)-2000(enBSD)]TJ /T5 1 Tf -42 208.0001 TD ( )Tj 237.9998 0 TD (Bcrypt)Tj /T6 1 Tf -155 207 TD [(Increasing)-27000(computational)-26999.8(p)-2000(o)]TJ 1033 0 TD (w)Tj 58.0002 0 TD [(er)-27000(mak)]TJ 250 0 TD [(es)-27000(the)-28000(use)-28000(of)]TJ -1424 100 TD (cryptograph)Tj 441 0 TD (y)Tj 78.9998 0 TD (to)Tj 111.0002 0 TD (further)Tj 290 0 TD (system)Tj 284.9998 0 TD (securit)Tj 239.0002 0 TD (y)Tj 81 0 TD (more)Tj 218 0 TD (fea )Tj -1744 100 TD (sible)Tj 194.9998 0 TD (and)Tj 167.0002 0 TD 0.0001 Tc (allo)Tj 127.9998 0 TD [(ws)-30999.7(for)-31999.9(m)0.3(ore)]TJ 469.0002 0 TD 0 Tc (tuneable)Tj 341.9998 0 TD (securit)Tj 238.9998 0 TD (y)Tj 76.0005 0 TD 0.0001 Tc (param )Tj -1616 99 TD -0.0001 Tc (eters)Tj 207.9998 0 TD 0.0001 Tc (suc)Tj 114.0002 0 TD 0 Tc (h)Tj 83 0 TD (as)Tj 111 0 TD (public)Tj 258 0 TD (k)Tj 42 0 TD -0.0002 Tc (ey)Tj 117 0 TD 0 Tc (length)Tj 314 0 TD (Ho)Tj 102 0 TD (w)Tj 58 0 TD (ev)Tj 79 0 TD (er)Tj 130 0 TD -0.0003 Tc (one)Tj 161.9995 0 TD 0.0003 Tc (se )Tj -1777.9995 100 TD -0.0001 Tc (curit)Tj 169 0 TD 0 Tc (y)Tj 78 0 TD [(parameter)-31999.8( )]TJ 465 0 TD -0.0001 Tc (the)Tj 149 0 TD 0 Tc (length)Tj 260 0 TD (and)Tj 167.9998 0 TD (en)Tj 81.0002 0 TD (trop)Tj 151 0 TD (y)Tj 77 0 TD -0.0005 Tc (of)Tj 101 0 TD 0 Tc (user )Tj -1699 99 TD (c)Tj 35 0 TD [(hosen)-17999.8(passw)]TJ 433.9998 0 TD [(ords)-17000( )-19000.2(d)0(o)-1999.8(e)0(s)-19000.2(not)-19000(scale)-18000.2(a)0.2(t)-19000(a)-0.2(ll)-19000.2(with)-19000(comput )]TJ -468.9998 100 TD (ing)Tj 147 0 TD 1.9998 Tc (po)Tj 88 0 TD 0 Tc (w)Tj 58 0 TD -0.0001 Tc (er)Tj 153 0 TD (Man)Tj 162 0 TD 0 Tc (y)Tj 79 0 TD (systems)Tj 315.9998 0 TD (still)Tj 170.0002 0 TD (require)Tj 288 0 TD (user c)Tj 212 0 TD (hosen)Tj -1673 100 TD (secret)Tj 252.9998 0 TD (passw)Tj 212 0 TD 0.0001 Tc (ords)Tj 196.0002 0 TD -0.0001 Tc (whic)Tj 163.9998 0 TD 0 Tc (h)Tj 91.0002 0 TD (are)Tj 156 0 TD (hashed)Tj 294 0 TD (to)Tj 118 0 TD (k)Tj 42 0 TD (eep)Tj 165 0 TD (them)Tj -1691 99.0001 TD (secret)Tj 317 0 TD (When)Tj 258.9998 0 TD 0.0001 Tc (the)Tj 159.0002 0 TD -0.0001 Tc (UNIX)Tj 261 0 TD (passw)Tj 212 0 TD 0 Tc (ord)Tj 163 0 TD (hash)Tj /T7 1 Tf 210 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf -1581 100 TD 0 Tc (w)Tj 57.9998 0 TD 0.0002 Tc (as)Tj 121.0002 0 TD -0.0002 Tc (in)Tj 66.9998 0 TD 0.0001 Tc [(tro)-1999.9(d)0.3(uced)]TJ 368 0 TD 0.0002 Tc (in)Tj 116.0002 0 TD 0 Tc ()Tj 241 0 TD -0.0002 Tc (it)Tj 102 0 TD 0 Tc (could)Tj 240.9998 0 TD (not)Tj 167.0002 0 TD (hash)Tj 214 0 TD (more)Tj -1695 100 TD [(than)-31000.2(four)-31000(passw)]TJ 586 0 TD [(ords)-29000(p)-2000.2(e)0(r)-31000(s)0.2(econd)]TJ 644 0 TD [(With)-32000(increasingly)]TJ -1230 99.0001 TD (more)Tj 217 0 TD 1.9998 Tc (po)Tj 88 0 TD 0 Tc (w)Tj 57.9998 0 TD 0.0001 Tc (erful)Tj 201 0 TD (attac)Tj 183.0002 0 TD 0 Tc (k)Tj 41.9998 0 TD 0.0001 Tc (ers)Tj 138 0 TD 0 Tc (it)Tj 93.0002 0 TD (is)Tj 92.9998 0 TD (common)Tj 342.0002 0 TD (to)Tj 111 0 TD (compute)Tj ET endstream endobj 39 0 obj << /ProcSet [/PDF /Text ] /Font << /T1 4 0 R /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 11 0 R /T9 17 0 R /T10 18 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 41 0 obj << /Length 19024 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 709.14 Tm 0 g /GS1 gs 0 Tc 0 Tw [(more)-29999.9(than)-31000( )-28000(passw)]TJ 923 0 TD [(ord)-29000(hashes)-30000(p)-2000(e)0(r)-30999.8(s)-0.2(econd)]TJ 876.0001 0 TD (In)Tj -1799.0001 100 TD [(Op)-2000.1(enBSD)-30000(w)]TJ 452 0 TD [(e)-30000.1(u)0.1(se)-29000(the)]TJ /T7 1 Tf 357.0001 0 TD (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 214 0 TD [(algorithm)-28000.1(t)0(o)-29999.8(m)-0.2(ak)]TJ 637.0001 0 TD [(e)-29000(the)]TJ -1694.0001 99 TD (cost)Tj 181 0 TD 0.0001 Tc (of)Tj 104.0001 0 TD 0 Tc (passw)Tj 212.0001 0 TD (ord)Tj 156 0 TD (hashing)Tj 313.9999 0 TD (parameterizable)Tj 665.0001 0 TD (Its)Tj 131.9998 0 TD 0.0001 Tc (de )Tj -1763.9999 100 TD 0 Tc (sign)Tj 185.0001 0 TD -0.0001 Tc (mak)Tj 153 0 TD 0 Tc (es)Tj 109.9999 0 TD (it)Tj 96.0001 0 TD (hard)Tj 207.9999 0 TD 0.0001 Tc (to)Tj 115 0 TD 0 Tc (optimize)Tj /T7 1 Tf 350 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 183 0 TD (s)Tj 97.0001 0 TD (execution)Tj -1531.0001 100 TD [(sp)-2000(eed)]TJ 238.0001 0 TD -0.0001 Tc (or)Tj 112 0 TD (use)Tj 153.0001 0 TD 0 Tc [(commo)-2000(dit)]TJ 359.9999 0 TD (y)Tj 80.0001 0 TD (hardw)Tj 225 0 TD (are)Tj 146.9999 0 TD (instead)Tj 296.0001 0 TD -0.0002 Tc (of)Tj 103.9998 0 TD 0.0001 Tc (soft )Tj -1714.9999 99 TD 0 Tc (w)Tj 58 0 TD 0.0001 Tc (are)Tj /T7 1 Tf 171.0001 0 TD 0 Tc (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 210.9999 0 TD [(uses)-27000.1(a)-27000()0.1( bit)-26000.1(salt)-27000(and)-28000(encrypts)-27000(a)-27000()0.2( )]TJ -474 100 TD [(bit)-29000.1(m)0(agic)-28000(v)]TJ 410.0001 0 TD (alue)Tj 210.9999 0 TD [(It)-29000(tak)]TJ 207.0001 0 TD -0.0001 Tc [(es)-27000.2(adv)]TJ 223.9999 0 TD 0 Tc (an)Tj 86 0 TD [(tage)-27000.1(of)-29000(the)-29000(f)0(act)-29000(t)0(hat)]TJ -1138 100 TD (the)Tj 152 0 TD (Blo)Tj 122 0 TD (wsh)Tj 220.0001 0 TD (algorithm)Tj 387.9999 0 TD (used)Tj 230.0001 0 TD -0.0001 Tc (in)Tj 106 0 TD (the)Tj 151.9999 0 TD 0 Tc (core)Tj 184.0001 0 TD -0.0002 Tc (of)Tj /T7 1 Tf 103.9998 0 TD 0 Tc (b)Tj 34.0002 0 TD (crypt)Tj /T6 1 Tf -1692.0001 99 TD 0.0001 Tc (for)Tj 133 0 TD 0 Tc (passw)Tj 212.0001 0 TD [(ord)-31999.9(h)-0.1(ashing)]TJ 495.9999 0 TD (needs)Tj 233.0001 0 TD (a)Tj 75 0 TD (fairly)Tj 223.9999 0 TD [(exp)-1999.8(ensiv)]TJ 309.9999 0 TD (e)Tj 70 0 TD (k)Tj 42 0 TD (ey)Tj -1794.9999 100 TD (setup)Tj 260.0001 0 TD (th)Tj 75.9999 0 TD 0.0001 Tc (us)Tj 118 0 TD 0 Tc (considerably)Tj 490 0 TD 0.0001 Tc (slo)Tj 96 0 TD 0 Tc (wing)Tj 209.0001 0 TD -0.0001 Tc (do)Tj 85.9999 0 TD 0 Tc (wn)Tj 145.0001 0 TD (dictionary )Tj -1480.0001 98.9995 TD (based)Tj 244.0001 0 TD (attac)Tj 182.9999 0 TD (ks)Tj /T7 1 Tf 173.0001 0 TD (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 223 0 TD (uses)Tj 189 0 TD 0.0001 Tc (the)Tj /T7 1 Tf 155 0 TD (ar)Tj 73.0001 0 TD -0.0001 Tc (cr)Tj 110.9999 0 TD (andom)Tj /T6 1 Tf 392.9999 0 TD 0.0001 Tc (in )Tj -1777.9999 100 TD 0 Tc [(terface)-30000.1(f)0(or)-31000.1(passw)]TJ 616 0 TD [(ord)-28000(salt generation)]TJ 755 0 TD [(A)-30999.9(c)-0.2(omparison)]TJ -1371 100 TD 2.0001 Tc [(be)2000.1(t)]TJ 115 0 TD 0 Tc (w)Tj 58.0001 0 TD (een)Tj 153.9999 0 TD (this)Tj 168 0 TD (approac)Tj 286.0001 0 TD -0.0001 Tc [(h)-32000.1(and)]TJ 245.9999 0 TD 0.0001 Tc (the)Tj 149 0 TD 0 Tc (mec)Tj 141 0 TD (hanism)Tj 293.0001 0 TD -0.0001 Tc (used)Tj 196 0 TD 0 Tc (in)Tj -1806.0001 99 TD [(certain)-30999.9(other)-30999.9(Unix)-31000(systems)-30999.9(for)-30999.9(g)-0.1(enerating)-30000.2(salts)-31000.2(has)]TJ 0 100 TD 0.0001 Tc (sho)Tj 119.0001 0 TD 0 Tc [(wn)-23999.9(that)-24000.1(w)0.1(hile)]TJ /T7 1 Tf 519.9999 0 TD 0.0001 Tc (ar)Tj 73 0 TD 0 Tc (cr)Tj 111 0 TD (andom)Tj /T6 1 Tf 377 0 TD [(b)-2000(eha)]TJ 171 0 TD (v)Tj 42 0 TD [(ed)-23999.8(extremely)]TJ -1413 100 TD (close)Tj 209 0 TD 0.0001 Tc (to)Tj 113.0001 0 TD 0 Tc (the)Tj 153.0001 0 TD (statistical)Tj 389.9999 0 TD (theoretical)Tj 422.0001 0 TD [(exp)-1999.9(ectations)]TJ 519 0 TD (in)Tj -1806.0001 99.0005 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (trast)Tj 228.9999 0 TD (other)Tj 223.0001 0 TD (systems)Tj 313.9999 0 TD [(pro)-2000(d)0.1(uced)]TJ 369 0 TD [(large)-31999.9(n)]TJ 253.0001 0 TD (um)Tj 113 0 TD 2 Tc [(be)2000.2(r)1999.8(s)]TJ 183.9998 0 TD 0.0002 Tc (of)Tj -1807.9999 100 TD 0 Tc [(collisions)-27000.1(making)-26000(dictionary)-27000.1(attac)]TJ 1245 0 TD [(ks)-26000(faster)]TJ -1162 102 TD (A)Tj 113.9999 0 TD 0.0001 Tc [(sp)-1999.8(ecial)]TJ 295.0001 0 TD 0 Tc (conguration)Tj 528 0 TD (le)Tj /T7 1 Tf 187 0 TD (p)Tj 38 0 TD (asswd c)Tj 266.0001 0 TD (onf\012)Tj /T6 1 Tf 224 0 TD ()Tj 84 0 TD (is)Tj -1819.0001 99 TD (used)Tj 198.0001 0 TD -0.0001 Tc (to)Tj 110.9999 0 TD 0 Tc (determine)Tj 396 0 TD (whic)Tj 164 0 TD (h)Tj 83 0 TD (t)Tj 30 0 TD [(yp)-2000.1(e)]TJ 166 0 TD (of)Tj 103 0 TD (passw)Tj 212.0001 0 TD (ord)Tj 156 0 TD -0.0002 Tc (sc)Tj 68 0 TD -0.0001 Tc (heme)Tj -1687.0001 100 TD 0.0001 Tc (is)Tj 90 0 TD 0 Tc (used)Tj 196 0 TD -0.0001 Tc (for)Tj 134.0001 0 TD 0 Tc (a)Tj 74.9999 0 TD (giv)Tj 107 0 TD (en)Tj 116 0 TD (user)Tj 183 0 TD 0.0001 Tc (or)Tj 108 0 TD 0 Tc (group)Tj 287 0 TD (It)Tj 97.0001 0 TD -0.0001 Tc (is)Tj 89 0 TD 0 Tc [(p)-2000(ossible)]TJ 318.9998 0 TD (to)Tj -1800.9999 100 TD [(use)-23999.9(dieren)]TJ 408 0 TD 0.0001 Tc [(t)-24999.9(p)0.1(assw)]TJ 269 0 TD 0 Tc [(ord)-23000(s)0(c)]TJ 212 0 TD [(hemes)-24000.1(for)-24000(lo)-2000(cal)-23999.8(o)-0.2(r)-23999.8(Y)-0.2(P)-24000(p)0.2(ass )]TJ -889 98.9998 TD (w)Tj 58 0 TD (ords)Tj 219 0 TD (F)Tj 47 0 TD 0.0001 Tc (or)Tj /T7 1 Tf 105 0 TD 0 Tc (b)Tj 34.0001 0 TD (crypt)Tj /T6 1 Tf 238.9999 0 TD [(the)-30000.1(n)]TJ 189 0 TD 0.0001 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)0(r)-30000(o)0(f)-30000.1(r)0.1(ounds)-29000(is)-28999.8(also)-28999.8(in )]TJ -1004 100 TD (cluded)Tj 293 0 TD [(This)-18999.9(facilitates)-20000(a)0(dapting)-19000.1(the)-20000(p)-0.1(assw)]TJ 1235.0001 0 TD -0.0001 Tc [(ord)-18000.3(v)]TJ 180.9998 0 TD 0.0001 Tc (eri )Tj -1708.9999 99 TD 0 Tc [(cation)-19000(time)-20000.1(to)-19000(increasing)-17000(pro)-2000(cessor)-17999.9(s)0(p)-2000(e)-0.1(ed)]TJ 1507.9999 0 TD (Curren)Tj 253.0002 0 TD (tly)Tj 91.9998 0 TD ()Tj -1852.9999 100 TD [(the)-22000(d)0(efault)-23000.1(n)]TJ 455 0 TD (um)Tj 113 0 TD [(b)-2000(e)-0.1(r)-21999.9(o)-0.1(f)-22000(r)0.1(ounds)-21000(f)0(or)-20999.9(a)-22000.1(n)0.1(ormal)-21000(user)-21000(is)-22000( )]TJ /T11 1 Tf 1246.9999 -29.9998 TD ()Tj /T6 1 Tf 37 29.9998 TD ()Tj -1851.9999 100 TD 0.0001 Tc [(and)-22999.9( )]TJ /T11 1 Tf 199 -29.9998 TD 0 Tc ()Tj /T6 1 Tf 61.0001 29.9998 TD [(for)-23000()-0.1(ro)-2000(ot)]TJ /T7 1 Tf 415.0001 0 TD (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 207 0 TD [(is)-23000(used)-24000(in)-24000.1(Op)-2000.1(enBSD)-24000(a)0(s)-23000(the)]TJ -916 99 TD [(default)-23999.9(passw)]TJ 487 0 TD [(ord)-21000(sc)]TJ 210.0001 0 TD [(heme)-23000(since)-23000(v)]TJ 452.9999 0 TD [(ersion)-22000( )]TJ 400.0001 0 TD (F)Tj 47 0 TD -0.0001 Tc [(or)-23000.1(more)]TJ -1597.0001 100 TD 0 Tc [(details)-27000(s)-0.1(ee)-28000.1(\012\012)]TJ 527 0 TD 0.0001 Tc ()Tj /T1 1 Tf -527 322.0002 TD 0 Tc ()Tj 168 0 TD (Conclusion)Tj /T6 1 Tf -85 206 TD 0.0001 Tc (In)Tj 112.0001 0 TD -0.0001 Tc (this)Tj 171 0 TD 0 Tc [(pap)-2000(e)0(r)]TJ 266.9999 0 TD (w)Tj 58 0 TD (e)Tj 73 0 TD 0.0001 Tc (ga)Tj 82 0 TD 0 Tc (v)Tj 42 0 TD (e)Tj 71 0 TD (an)Tj 124 0 TD (o)Tj 40 0 TD (v)Tj 42 0 TD (erview)Tj 268 0 TD (of)Tj 103.0001 0 TD -0.0001 Tc (the)Tj 152 0 TD 0 Tc (cryp )Tj -1688.0001 100 TD (tograph)Tj 281 0 TD [(y)-27000(u)-0.1(sed)-30000.1(i)0.1(n)-29000(O)0(p)-2000(enBSD)-29999.9(W)]TJ 856.0001 0 TD [(e)-29999.9(presen)]TJ 296.9999 0 TD [(ted)-28999.8(the)-29000(s)0(up )]TJ -1434 99 TD [(p)-2000.1(o)0.1(rted)-32000(net)]TJ 383 0 TD (w)Tj 58.0001 0 TD [(ork)-31000(s)0.1(ecurit)]TJ 388.9999 0 TD (y)Tj 76.0001 0 TD (mec)Tj 140.9999 0 TD (hanisms)Tj 348 0 TD (with)Tj 193.9999 0 TD 0.0001 Tc (particu )Tj -1588.9999 100 TD 0 Tc [(lar)-29000(e)-0.1(mphasis)-28999.9(o)0(n)-29000(I)0(P)-30000.1(s)0.1(ecurit)]TJ 958 0 TD (y)Tj 37 0 TD ()Tj 65 0 TD (W)Tj 78 0 TD [(e)-30000.1(t)0(hen)-30000(discussed)-30000.2(the)]TJ -1138 100 TD (v)Tj 39.0001 0 TD [(arious)-30000.1(uses)-29999.9(of)-31000(randomness)-29000(throughout)-29999.9(the)-31000(system)]TJ -39.0001 98.9998 TD (Finally)Tj 248.0001 0 TD 26 Tc (w)Tj 106.9999 0 TD 0 Tc [(e)-26000(b)0(riey)-25000(c)0.1(o)]TJ 394 0 TD (v)Tj 42 0 TD [(ered)-24000.1(our)-24999.9(plans)-25000(for)-25000.1(future)-27000(w)]TJ 966.9999 0 TD (ork)Tj -1757.9999 100.0001 TD [(in)-27999.9(the)-28000.1(a)-0.1(rea)-26000.1(o)0.1(f)-28000(secure)-26000(s)-0.1(torage)]TJ 83 102 TD (A)Tj 98 0 TD (lot)Tj 132.0001 0 TD -0.0001 Tc (of)Tj 101.9999 0 TD 0 Tc (w)Tj 58 0 TD (ork)Tj 153 0 TD (remains)Tj 318 0 TD (to)Tj 108.9999 0 TD 2.0001 Tc (be)Tj 121.0002 0 TD 0 Tc (done)Tj 253.9999 0 TD -0.0002 Tc (In)Tj 110.9999 0 TD 0.0001 Tc (the)Tj 151 0 TD 0 Tc (short)Tj -1689.9999 99 TD (term)Tj 233 0 TD (w)Tj 58.0001 0 TD (e)Tj 72.9999 0 TD (need)Tj 203 0 TD (to)Tj 111.0001 0 TD (complete)Tj 359 0 TD -0.0001 Tc (the)Tj 151.9999 0 TD 0 Tc (remaining)Tj 397.0001 0 TD -0.0001 Tc (parts)Tj 221.9998 0 TD 0.0002 Tc (of)Tj -1807.9999 100 TD 0 Tc [(those)-31999.9(m)-0.1(ec)]TJ 363.0001 0 TD [(hanisms)-30999.9(s)-0.1(till)-31999.9(under)-32000(dev)]TJ 853.9999 0 TD (elopmen)Tj 298.0001 0 TD (t)Tj 87.9998 0 TD (k)Tj 42 0 TD (eeping)Tj -1644.9999 100 TD 0.0001 Tc (in)Tj 105 0 TD 0 Tc (mind)Tj 221.0001 0 TD -0.0001 Tc (of)Tj 101.9999 0 TD 0 Tc (course)Tj 263 0 TD (that)Tj 188 0 TD (securit)Tj 239.0001 0 TD (y)Tj 78.9999 0 TD (and)Tj 202.0001 0 TD -0.0001 Tc (standards)Tj 420 0 TD 0 Tc (is)Tj -1819.0001 99 TD 25.0001 Tc [(am)25000.2(o)]TJ 176.0001 0 TD 0 Tc [(ving)-24999.9(target)-26000(and)-25000(constan)]TJ 881.9999 0 TD [(t)-25000(main)]TJ 235.0001 0 TD -0.0001 Tc [(tenance)-25000.1(a)-0.3(nd)-26000.3(up )]TJ -1293.0001 100 TD 0 Tc [(dating)-20000(will)-20000(b)-1999.9(e)-20000(needed)]TJ 811 0 TD (Bey)Tj 138.0001 0 TD [(ond)-18999.9(t)0(hat)-22000.1(in)]TJ 416.9999 0 TD [(tegration)-18999.8(with)]TJ -1366 100.0001 TD (existing)Tj 322.0001 0 TD (and)Tj 175.9999 0 TD (new)Tj 186 0 TD (utilities)Tj 315.0001 0 TD -0.0001 Tc (is)Tj 98.9999 0 TD 0 Tc (a)Tj 84 0 TD [(ma)-5000(jor)]TJ 257 0 TD (item)Tj 204.0001 0 TD -0.0002 Tc (in)Tj 112 0 TD 0 Tc (our)Tj -1755.0001 98.9999 TD (agenda)Tj 311 0 TD (Finally)Tj 248 0 TD 23 Tc (w)Tj 104 0 TD 0 Tc [(e)-20000(are)-20000(considering)-18999.9(n)0(ew)-21000(mec)]TJ 920.9999 0 TD (hanisms)Tj -1583.9999 100.0001 TD [(that)-21999.9(address)-20000(dieren)]TJ 732 0 TD [(t)-21000(p)-0.1(roblems)]TJ /T7 1 Tf 427 0 TD (e g )Tj /T6 1 Tf 176 0 TD (un)Tj 90 0 TD [(trusted co)-2000(d)0.2(e)]TJ -1425 98.9998 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (tainmen)Tj 293 0 TD -0.0001 Tc (t)Tj -333.0001 102.0002 TD 0.0001 Tc (It)Tj 99.0001 0 TD -0.0001 Tc (is)Tj 91.9999 0 TD 0 Tc [(imp)-1999.9(ortan)]TJ 333 0 TD (t)Tj 68.0001 0 TD -0.0001 Tc (to)Tj 109.9999 0 TD 0.0001 Tc (note)Tj 193 0 TD 0 Tc (that)Tj 189 0 TD (all)Tj 124 0 TD (the)Tj 152.0001 0 TD (mec)Tj 140.9998 0 TD (hanisms)Tj -1583.9999 100 TD [(describ)-2000.1(ed)-27999.9(in)-29000(this)-28000.1(pap)-2000(e)0(r)-28000.1(a)0.1(re)-27999.9(curren)]TJ 1232 0 TD [(tly)-26999.9(i)0(n)-29000.1(u)0.2(se)-28000(solving)]TJ -1232 100 TD [(real)-24000(problems)]TJ 547.0001 0 TD (W)Tj 78 0 TD [(e)-24999.9(h)0(op)-1999.9(e)-25000(that)-25999.9(this)-25000(pap)-2000(e)0(r)-25000.1(will)-25000.2(e)0(ncour )]TJ -625.0001 99.0001 TD (age)Tj 160.0001 0 TD (others)Tj 262 0 TD -0.0001 Tc (to)Tj 113.9999 0 TD 0 Tc (add)Tj 174 0 TD (these)Tj 224 0 TD (or)Tj 115.0001 0 TD (similar)Tj 284.9998 0 TD 0.0001 Tc (mec)Tj 141.0002 0 TD 0 Tc (hanisms)Tj 331 0 TD (in)Tj 219 -5317 TD [(their)-28000.2(systems)]TJ /T1 1 Tf 0 319 TD ()Tj 168 0 TD -0.0002 Tc (Ac)Tj 132 0 TD 0 Tc (kno)Tj 174 0 TD (wledgmen)Tj 486 0 TD (ts)Tj /T6 1 Tf -877.0002 201.9995 TD (W)Tj 78.0002 0 TD (e)Tj 87 0 TD (w)Tj 58 0 TD 0.0001 Tc (ould)Tj 205 0 TD -0.0001 Tc (lik)Tj 88 0 TD 0 Tc (e)Tj 86 0 TD (to)Tj 123 0 TD (thank)Tj 259 0 TD 0.0001 Tc (Hugh)Tj 244.9998 0 TD 0 Tc (Graham)Tj 374.0002 0 TD (T)Tj 53 0 TD 2 Tc [(od)2000.5(d)]TJ -1739 100 TD 0 Tc (Miller)Tj 285 0 TD (and)Tj 177.9998 0 TD (Chris)Tj 238 0 TD (T)Tj 53.0002 0 TD -0.0001 Tc (uran)Tj 209.9998 0 TD 0.0001 Tc (who)Tj 191.0002 0 TD 0 Tc (pro)Tj 119 0 TD (vided)Tj 238 0 TD 0.0001 Tc (commen)Tj 298 0 TD 0 Tc (ts)Tj -1810 99.0005 TD -0.0001 Tc (and)Tj 198 0 TD 0 Tc (sometimes)Tj 407 0 TD -0.0001 Tc (text)Tj 209.9998 0 TD 0 Tc (in)Tj 101.0002 0 TD [(earlier)-30999.8(v)]TJ 301 0 TD [(ersions)-30000.2(o)0(f)-32000(this)]TJ 543 0 TD (pa )Tj -1760 100 TD [(p)-2000(er)]TJ 186 0 TD (W)Tj 77.9998 0 TD 31 Tc (ew)Tj 126 0 TD 0 Tc [(ould)-30000(also)-30000.2(lik)]TJ 445.0002 0 TD [(e)-29999.8(t)-0.2(o)-29999.8(t)0(hank)-31000(all)-30000(t)-0.2(he)-31000(Op)-2000(enBSD)]TJ -835 100 TD -0.0001 Tc (dev)Tj 125 0 TD [(elop)-2000.3(e)-0.1(rs)]TJ 306.9998 0 TD 0.0001 Tc (for)Tj 155.0002 0 TD -0.0001 Tc (the)Tj 171 0 TD 0 Tc (w)Tj 58 0 TD (ork)Tj 172.9998 0 TD 0.0001 Tc (they)Tj 214 0 TD (con)Tj 123 0 TD 0 Tc (tribute)Tj 304.0002 0 TD (to)Tj 130 0 TD (the)Tj -1760 99 TD [(pro)-4999.8(ject)-27000(and)-27000.2(our)-27000(users)-27000(for)-26999.8(t)-0.2(heir)-28000(c)0(on)]TJ 1274 0 TD (tin)Tj 99 0 TD -0.0001 Tc [(uing)-26000.1(supp)-2000.1(o)-0.6(rt)]TJ /T1 1 Tf -1373 319 TD 0 Tc ()Tj 168 0 TD -0.0002 Tc (Av)Tj 138 0 TD 0 Tc (ailabilit)Tj 370.9998 0 TD (y)Tj /T6 1 Tf -594 202 TD 0.0001 Tc [(All)-21999.7(t)0.1(he)-20999.9(soft)]TJ 396.0002 0 TD 0 Tc (w)Tj 58 0 TD [(are)-19999.8(describ)-1999.8(ed)-21000.2(in)-22000.2(the)-21000(p)0.2(ap)-1999.8(er)-21000(is)-21000(a)]TJ 1064 0 TD (v)Tj 38.9995 0 TD 0.0001 Tc (ailable)Tj -1639.9995 100 TD [(through)-26999.7(t)0.1(he)-27999.7(Op)-1999.7(enBSD)-27999.9(w)]TJ 906.9998 0 TD -0.0001 Tc [(eb)-27000.3(page)-27000.1(at)]TJ /T9 1 Tf -470.9998 188 TD 0 Tc (httpwww openbs)Tj 747 0 TD -0.0002 Tc (d )Tj 87 0 TD 0 Tc (org)Tj 130.9998 0 TD ()Tj /T1 1 Tf -1400.9998 319 TD ( )Tj 168 0 TD (Disclaimer)Tj /T6 1 Tf -85.0002 201.9998 TD [(Op)-1999.8(enBSD)-29999.8(i)-0.2(s)-29999.8(b)-0.2(ased)-30000(in)-30000.2(Calgary)]TJ 1092 0 TD [()-29000(C)0(anada)]TJ 396.0002 0 TD -0.0001 Tc [(All)-30000.6(i)-0.1(ndi )]TJ -1571 100 TD 0 Tc [(viduals)-29000(doing)-27999.8(cryptograph)]TJ 954 0 TD [(y related)-25999.8(w)]TJ 406 0 TD [(ork)-28000(d)0.5(o)-29000.5(s)0(o)-27999.5(o)-0.5(ut )]TJ -1360 99 TD [(side)-28000.2(coun)]TJ 336 0 TD [(tries)-25999.8(t)0(hat)-28000(h)-0.2(a)]TJ 450 0 TD (v)Tj 41.9998 0 TD 0.0001 Tc [(e)-26000.1(l)0.3(imiting)-27999.7(la)]TJ 435 0 TD 0 Tc (ws)Tj /T1 1 Tf -1262.9998 319 TD (References)Tj /T15 1 Tf 38 194 TD ( )Tj 123 0 TD [(R)-21000(A)]TJ 155 0 TD [(tkinson)-26000(IP)-21000(Authen)]TJ 643 0 TD [(tication)-20000(Header)-27000(RF)]TJ 665 0 TD -0.0001 Tc [(C)-21000.1()]TJ -1463 91.0002 TD 0 Tc [(August)-24999.8( )]TJ -123 126.9998 TD ( )Tj 123 0 TD (R)Tj 112 0 TD (A)Tj 56 0 TD (tkinson)Tj 326 0 TD (IP)Tj 113.9998 0 TD (Encapsulating)Tj 510.0002 0 TD (Securit)Tj 233 0 TD (y)Tj 74 0 TD (P)Tj 50 0 TD (a)Tj 36 0 TD -0.0001 Tc (yload)Tj -1511 91.0002 TD 0 Tc (RF)Tj 105 0 TD [(C)-26000(\012)-27000(August)-24999.8( )]TJ -228 126.9998 TD ( )Tj 123 0 TD [(R)-23999.8(A)]TJ 157.9998 0 TD (tkinson)Tj 299.0002 0 TD (Securit)Tj 232.9998 0 TD [(y)-24000.2(Arc)]TJ 185.0002 0 TD [(hitecture)-24000.2(for)-25000(the)-24000(In)]TJ 639 0 TD (ternet)Tj -1514 91.0002 TD [(Proto)-1999.8(col)]TJ 339.9998 0 TD 0.0002 Tc (RF)Tj 105.0002 0 TD 0 Tc [(C)-26000()0.2( )-27000.2(August)-25000( )]TJ -568 126.9998 TD ( )Tj 123 0 TD [(S)-19000(Bello)]TJ 249 0 TD [(vin)-25000.2(Probable)-19000.2(P)0.2(lain)]TJ 641.9998 0 TD [(text)-20000(Cryptanalysis)-19000(of)-20000(the)]TJ -890.9998 91 TD [(IP)-22000(Securit)]TJ 335 0 TD -0.0001 Tc [(y)-19999.9(P)-0.3(roto)-2000.3(cols)-31000.3(In)]TJ /T16 1 Tf 517.9998 0 TD 0 Tc (Pr)Tj 80 0 TD (o)Tj 35.0002 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD [(dings)-26000.2(of)-23000(the)-25000(Symp)]TJ 586 0 TD (o )Tj -1647 91.0002 TD [(sium)-30000.2(o)0.2(n)-31000(N)0(etwork)-32000(and)-31000.2(D)0(istribute)]TJ 1086 0 TD [(d)-32000(System)-32000(Se)]TJ 411 0 TD -0.0001 Tc (curity)Tj /T15 1 Tf 193.9995 0 TD 0 Tc ()Tj -1690.9995 91.9999 TD [(pages)-26000()0( \015)-29000(F)]TJ 569 0 TD [(ebruary)-24999.8(\012)]TJ -692 126 TD ( )Tj 123 0 TD [(M)-30999.8(Blaze)]TJ 375 0 TD [(A)-30000(Cryptographic)-30999.8(File)]TJ 761 0 TD [(System)-29000(for)-32000(Unix)]TJ -1136 92 TD -0.0002 Tc (In)Tj /T16 1 Tf 100 0 TD (Pr)Tj 80 0 TD 0 Tc (o)Tj 34.9998 0 TD [(c)-32000(of)-31000(the)]TJ 317.0002 0 TD -0.0001 Tc [(st)-32000.1(A)]TJ 181.9998 0 TD 0 Tc [(CM)-31000(Confer)]TJ 379.0002 0 TD (enc)Tj 108.9998 0 TD (e)Tj 68 0 TD [(on)-32000(Computer)]TJ -1269.9998 91 TD [(and)-28000(Communic)]TJ 507.9998 0 TD [(ations)-28000.2(Se)]TJ 303.0002 0 TD (curity)Tj /T15 1 Tf 194 0 TD 26.9998 Tc [(N)26999.6(o)]TJ 142 0 TD 0 Tc (v)Tj 39 0 TD -0.0002 Tc (em)Tj 97 0 TD 2 Tc [(be)2000(r)-22000()2000.5()2000()1999.5()2000.5()]TJ -1406 127 TD 0 Tc ( )Tj 123 0 TD (T)Tj 114.9998 0 TD 0.0001 Tc (Dierks)Tj 254.0002 0 TD 0 Tc (and)Tj 162 0 TD (C)Tj 114.9998 0 TD (Allen)Tj 271 0 TD (The)Tj 170.0002 0 TD -0.0001 Tc (TLS)Tj 185 0 TD 0 Tc [(proto)-2000(col)]TJ 314 0 TD (v)Tj 39 0 TD (er)Tj -1625 91 TD (sion)Tj 165.9998 0 TD 0.0001 Tc ()Tj 177.0002 0 TD 0 Tc (Request)Tj 302 0 TD (for)Tj 124.9998 0 TD (Commen)Tj 298.0002 0 TD [(ts)-32000(Prop)-2000(osed)]TJ 467 0 TD (Stan)Tj -1535 91 TD [(dard)-30000.2()0.2()]TJ 420 0 TD (In)Tj 68.9998 0 TD [(ternet)-29000(Engineering)-31000.2(T)]TJ 707.0002 0 TD -0.0001 Tc [(ask)-30000.3(F)]TJ 182.9995 0 TD 0.0001 Tc [(orce)-31999.4(Jan)]TJ -1378.9995 92 TD 0 Tc [(uary)-24999.8()]TJ -123 126 TD ( \012)Tj 123 0 TD -0.0002 Tc (W)Tj 138 0 TD 0 Tc (Die)Tj 214.9998 0 TD (and)Tj 161 0 TD 0.0001 Tc (ME)Tj 203.0002 0 TD 0 Tc (Hellman)Tj 370 0 TD -0.0001 Tc (New)Tj 185 0 TD 0 Tc (Directions)Tj 378 0 TD (in)Tj -1650 92.0001 TD (Cryptograph)Tj 426.9998 0 TD (y)Tj 35.0002 0 TD ()Tj /T16 1 Tf 64 0 TD 0.0001 Tc [(IEEE)-29999.9(T)]TJ 264.9998 0 TD 0 Tc (r)Tj 28.0002 0 TD [(ansactions)-32000(on)-31000.2(Information)]TJ -819 90.9998 TD (The)Tj 125 0 TD -0.0001 Tc (ory)Tj /T15 1 Tf 107.9998 0 TD 0 Tc [()-27000.2(I)0.2(T\015\015 )-30999.8(No)]TJ 776.0002 0 TD -0.0001 Tc [(v)-25000.1()-0.1(\012)]TJ -1132 127.0002 TD 0 Tc ( )Tj 123 0 TD -0.0002 Tc (W)Tj 140.9998 0 TD 0.0001 Tc (Die)Tj 244.0002 0 TD 0 Tc (P)Tj 46 0 TD (C)Tj 138 0 TD (v)Tj 37 0 TD (an)Tj 120.9998 0 TD 0.0001 Tc (Oorsc)Tj 190 0 TD -0.0001 Tc (hot)Tj 177.0002 0 TD 0 Tc (and)Tj 164 0 TD (MJ)Tj 193 0 TD -0.0001 Tc (Wiener)Tj -1451 90.9999 TD 0 Tc (Authen)Tj 249 0 TD [(tication)-24999.8(and)-24999.8(A)-0.2(uthen)]TJ 677.9998 0 TD [(ticated)-24000.2(K)0.2(ey)-25000(Exc)]TJ 539.0002 0 TD -0.0001 Tc (hanges)Tj /T16 1 Tf -1466 91.0001 TD 0 Tc [(Designs)-26000(C)0(o)]TJ 397 0 TD [(des)-27000(a)-0.2(nd)-26999.8(Crypto)]TJ 503 0 TD (gr)Tj 63 0 TD 0.0001 Tc (aphy)Tj /T15 1 Tf 153.9998 0 TD 0 Tc [()-27000()0(\012\015 )-28000()]TJ ET endstream endobj 42 0 obj << /ProcSet [/PDF /Text ] /Font << /T1 4 0 R /T6 9 0 R /T7 10 0 R /T9 17 0 R /T11 30 0 R /T15 43 0 R /T16 44 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 46 0 obj << /Length 19094 >> stream BT /T15 1 Tf 0.12 0 0 -0.12 76.56 709.14 Tm 0 g /GS1 gs -0.0001 Tc 0 Tw ( )Tj 122.9999 0 TD 0 Tc [(D)-29000(Eastlak)]TJ 357 0 TD [(e)-32000(rd)-31000(and)-29000(C)0()-30000(K)-0.1(aufman)]TJ 885 0 TD [(Domain)-28999.8(name)]TJ -1242 92 TD [(system)-25000(securit)]TJ 475 0 TD [(y)-27000(extensions)]TJ 470.0001 0 TD [(Request)-25000(for)-27000.2(Commen)]TJ 710 0 TD -0.0002 Tc (ts)Tj -1655.0001 91 TD 0 Tc [(Prop)-1999.9(o)-0.1(sed)]TJ 388 0 TD (Standard)Tj 384 0 TD ( )Tj 228.0001 0 TD -0.0001 Tc (In)Tj 69 0 TD 0 Tc (ternet)Tj 246.9998 0 TD (Engineering)Tj -1315.9999 91 TD (T)Tj 49.0001 0 TD -0.0001 Tc [(ask)-26000.2(F)]TJ 178.9999 0 TD 0 Tc [(orce)-26000(Jan)]TJ 301 0 TD [(uary)-26000(\012)]TJ -690 112.9995 TD ( )Tj 161 0 TD [(N)-27999.9(Haller)]TJ 372 0 TD [(The)-29000(S)0.1(KEY)-26999.8(onetime)-27000(passw)]TJ 951.0001 0 TD [(ord)-30000.2(s)0(ystem)]TJ -1323.0001 91.0005 TD [(Request)-22999.9(for)-24000(Commen)]TJ 705 0 TD [(ts)-22000(Informational)-24000(\012)-26000.2(In)]TJ 890.0001 0 TD 0.0001 Tc (ter)Tj -1595.0001 91 TD 0 Tc [(net)-24999.9(E)-0.1(ngineering)-27000(T)]TJ 605 0 TD 0.0001 Tc [(ask)-25999.8(F)]TJ 179 0 TD 0 Tc [(orce)-25999.8(F)]TJ 227 0 TD [(ebruary)-25000.1( )]TJ -1172 112 TD ( )Tj 161 0 TD [(Neil)-18000.1(M)-19000.1(Haller)-21999.9(the)-18000(sk)]TJ 739.0001 0 TD [(ey)-18000.1(onetime)-17000(passw)]TJ 594.9998 0 TD 0.0001 Tc [(ord)-18999.9(s)0.1(ystem)]TJ -1333.9999 92 TD (In)Tj /T16 1 Tf 94 0 TD (Pr)Tj 80.0001 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31 0 TD (e)Tj 30.9999 0 TD (e)Tj 31.0001 0 TD [(dings)-28000(o)0(f)-26000(the)-26000(ISOC)-25000(Symp)]TJ 803.9999 0 TD [(osium)-26000(o)0(n)-26000(N)0(etwork)]TJ -1106 91 TD [(and)-28000.1(D)0.1(istribute)]TJ 475 0 TD [(d)-29000(S)-0.1(ystem)-28999.9(S)0(e)]TJ 405 0 TD (curity)Tj /T15 1 Tf 194 0 TD 27 Tc [()27000()27000.1()26999.9()27000()]TJ -1235 112 TD 0 Tc ( )Tj 161 0 TD 0.0001 Tc (D)Tj 116.9999 0 TD 0 Tc (Harkins)Tj 298.0001 0 TD (and)Tj 162 0 TD 0.0001 Tc (D)Tj 117 0 TD 0 Tc (Carrel)Tj 300.0001 0 TD -0.0001 Tc (The)Tj 169 0 TD (in)Tj 62 0 TD 0 Tc (ternet)Tj 238 0 TD (k)Tj 39 0 TD (ey)Tj 112 0 TD (ex)Tj -1614.0001 92 TD (c)Tj 32 0 TD (hange)Tj 232.0001 0 TD (IKE)Tj 284.9999 0 TD (Request)Tj 304 0 TD (for)Tj 128 0 TD (Commen)Tj 298.0001 0 TD -0.0002 Tc (ts)Tj 93.9998 0 TD 0 Tc [(Prop)-2000.2(osed)]TJ -1372.9999 90.9995 TD (Standard)Tj 372 0 TD ()Tj 211 0 TD 0.0001 Tc (In)Tj 69 0 TD 0 Tc (ternet)Tj 235 0 TD (Engineering)Tj 432.0001 0 TD (T)Tj 49 0 TD (ask)Tj 144 0 TD (F)Tj 44 0 TD -0.0001 Tc (orce)Tj -1556.0001 91.0005 TD 0.0001 Tc (No)Tj 94 0 TD 0 Tc (v)Tj 39.0001 0 TD -0.0001 Tc (em)Tj 97 0 TD 1.9999 Tc [(be)1999.9(r)-22000.1()1999.9()1999.8()2000()1999.9()]TJ -391.0001 113 TD 0 Tc ( )Tj 161 0 TD (P)Tj 46.0001 0 TD ()Tj 56.9999 0 TD (Karn)Tj 206 0 TD (and)Tj 160 0 TD (W)Tj 136 0 TD (Simpson)Tj 367 0 TD (Photuris)Tj 364.0001 0 TD (Sessionk)Tj 303.9998 0 TD 0.0002 Tc (ey)Tj -1639.9999 91 TD 0 Tc (managemen)Tj 396 0 TD [(t)-23000(p)-0.1(roto)-2000(col)]TJ 381 0 TD [(Request)-23000.1(for)-25000(Commen)]TJ 706.0001 0 TD 0.0001 Tc [(ts)-22999.7(Ex)]TJ -1483.0001 90.9995 TD 2 Tc [(pe)2000(r)1999.9(i)2000(m)2000.1(e)1999.9(n)]TJ 270 0 TD 0 Tc [(tal)-24000( )-27000(I)0(n)]TJ 412 0 TD [(ternet)-24000.1(E)0.1(ngineering)-25000(T)]TJ 695.9999 0 TD 0.0001 Tc [(ask)-24999.9(F)]TJ 178.0002 0 TD -0.0001 Tc (orce)Tj -1556.0001 92.0005 TD 0 Tc (Marc)Tj 170 0 TD [(h)-26000.1()0()]TJ -331 112 TD ( )Tj 161 0 TD [(S)-20999.9(Ken)]TJ 219.9999 0 TD [(t)-21000.1(and)-21000(R)-21000(A)]TJ 351.0001 0 TD [(tkinson)-26000(IP)-21000.1(authen)]TJ 623.0001 0 TD [(tication)-22000(header)]TJ -1194.0001 91 TD [(Request)-27999.9(for)-29999.9(C)0(ommen)]TJ 716 0 TD [(ts)-27000(Prop)-2000(osed)-29999.8(S)-0.1(tandard)-28000()]TJ -716 91.9998 TD 0.0001 Tc (In)Tj 69 0 TD 0 Tc [(ternet)-24999.9(Engineering)-26000(T)]TJ 698 0 TD [(ask)-26000(F)]TJ 179 0 TD [(orce)-25999.9(N)0(o)]TJ 276.9999 0 TD (v)Tj 39.0001 0 TD (em)Tj 96.9999 0 TD 0.0001 Tc [(b)-1999.9(e)-0.1(r)-23999.7()0.1()]TJ -1519.9999 112 TD 0 Tc ( )Tj 161 0 TD [(S)-22000(Ken)]TJ 221.0001 0 TD -0.0001 Tc [(t)-22000(a)-0.2(nd)-22000.1(R)-23000.2(A)]TJ 354.9999 0 TD 0 Tc [(tkinson)-28000(IP)-23000(encapsulating)-23000(s)-0.2(ecurit)]TJ 1096.9999 0 TD (y)Tj -1672.9999 91 TD 0.0001 Tc (pa)Tj 79 0 TD 0 Tc [(yload)-30000.1(ESP)]TJ 487 0 TD [(Request)-29000(for)-31000(Commen)]TJ 718 0 TD [(ts)-28999.8(Prop)-2000.2(osed)]TJ -1284 92.0002 TD (Standard)Tj 372 0 TD ()Tj 211 0 TD 0.0001 Tc (In)Tj 69 0 TD 0 Tc (ternet)Tj 235 0 TD (Engineering)Tj 432.0001 0 TD (T)Tj 49 0 TD (ask)Tj 144 0 TD (F)Tj 44 0 TD -0.0001 Tc (orce)Tj -1556.0001 90.9998 TD 0.0001 Tc (No)Tj 94 0 TD 0 Tc (v)Tj 39.0001 0 TD -0.0001 Tc (em)Tj 97 0 TD 1.9999 Tc [(be)1999.9(r)-22000.1()1999.9()1999.8()2000()1999.9()]TJ -391.0001 112 TD 0 Tc ( )Tj 161 0 TD [(S)-26999.9(Ken)]TJ 226 0 TD [(t)-26000(and)-26000(R)-26000(A)]TJ 366.0001 0 TD (tkinson)Tj 303.9999 0 TD (Securit)Tj 233 0 TD [(y)-26000(arc)]TJ 167.0001 0 TD [(hitecture)-26999.8(for)]TJ -1296.0001 92 TD [(the)-24000.1(i)0(n)]TJ 193.0001 0 TD [(ternet)-23999.9(proto)-2000(col)]TJ 553.9999 0 TD [(Request)-24000(for)-26000(C)0.1(ommen)]TJ 707.9999 0 TD [(ts)-23000.2(Pro)]TJ -1454.9999 91.0002 TD 2 Tc [(po)1999.9(s)2000.1(e)2000(d)]TJ 227.0001 0 TD 0 Tc (Standard)Tj 373.9999 0 TD ()Tj 214 0 TD (In)Tj 69 0 TD (ternet)Tj 237 0 TD (Engineering)Tj 435.0001 0 TD (T)Tj 48.9998 0 TD (ask)Tj -1604.9999 90.9998 TD (F)Tj 44 0 TD [(orce)-26000(No)]TJ 277 0 TD (v)Tj 39 0 TD (em)Tj 97 0 TD [(b)-2000(e)-0.1(r)-23999.9()]TJ -618 113 TD ( \012)Tj 161 0 TD [(A)-32000(Kerom)]TJ 336.0001 0 TD [(ytis)-30000(and)-32000(N)-31000(Pro)]TJ 535.9999 0 TD (v)Tj 39 0 TD (os)Tj 142 0 TD 0.0001 Tc [(The)-31999.8(use)-31999.7(of)]TJ 397.0001 0 TD -0.0001 Tc (HMA)Tj 183.9998 0 TD 0.0002 Tc (C)Tj -1633.9999 91.0002 TD 0 Tc (RIPEMD)Tj 605 0 TD (within)Tj 257 0 TD 0.0001 Tc (ESP)Tj 191 0 TD 0 Tc (and)Tj 167 0 TD (AH)Tj 225.0001 0 TD -0.0002 Tc (In)Tj 69 0 TD -0.0001 Tc (ternet)Tj -1514.0001 91 TD 0 Tc (Draft)Tj 240.0001 0 TD -0.0001 Tc (In)Tj 68.9999 0 TD 0 Tc (ternet)Tj 235 0 TD (Engineering)Tj 434 0 TD (T)Tj 49 0 TD 0.0001 Tc (ask)Tj 145 0 TD 0 Tc (F)Tj 44 0 TD (orce)Tj 196.0001 0 TD (F)Tj 44 0 TD (ebruary)Tj -1456.0001 91.9998 TD ()Tj 209.0001 0 TD (W)Tj 72.9999 0 TD [(ork)-25000(in)-26000(progress)]TJ -443 112 TD ( )Tj 161 0 TD 0.0001 Tc (A)Tj 116 0 TD 0 Tc (D)Tj 117.0001 0 TD (Kerom)Tj 225.0001 0 TD (ytis)Tj 181.9999 0 TD (J)Tj 98.0001 0 TD (Ioannidis)Tj 366.9999 0 TD (and)Tj 161 0 TD (J)Tj 97.0001 0 TD (M)Tj 128.9998 0 TD (Smith)Tj -1491.9999 91.0002 TD (Implemen)Tj 331 0 TD [(ting)-18000(IPsec)-27000(In)]TJ /T16 1 Tf 468 0 TD 0.0001 Tc (Pr)Tj 80 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31.0001 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD [(dings)-25000.1(o)0(f)-22000.1(Glob)]TJ 431 0 TD [(al)-24000(Inter )]TJ -1438.0001 92 TD [(net)-30000.1()0.1(Glob)]TJ 313 0 TD [(eCom)-30000()]TJ /T15 1 Tf 355 0 TD [()-28000.1(p)0.1(ages)-27999.9()-29000.1(\015)-27000( )-30000(No)]TJ 803.0001 0 TD (v)Tj 38.9998 0 TD 0.0002 Tc (em)Tj 97.0002 0 TD 2 Tc [(be)2000(r)]TJ -1607.0001 91 TD 0 Tc (\012)Tj -161 112 TD ( )Tj 161 0 TD (RSA)Tj 196.0001 0 TD [(Lab)-2000(oratories)]TJ /T16 1 Tf 518.0001 0 TD -0.0001 Tc (PK)Tj 108.9999 0 TD 0 Tc (CS)Tj 138 0 TD 0.0001 Tc ( \012)Tj 186 0 TD 0 Tc (RSA)Tj 196.0001 0 TD (Encryption)Tj -1343.0001 91.9998 TD (Standar)Tj 256 0 TD (d)Tj /T15 1 Tf 39 0 TD 28 Tc (v)Tj 88.0001 0 TD 0 Tc [(ersion)-25999.9()0( )-25999.9(edition)-27000()]TJ 831.9999 0 TD (No)Tj 93.9999 0 TD (v)Tj 39.0002 0 TD (em)Tj 97 0 TD 1.9998 Tc [(be)1999.6(r)2000()]TJ -1606.0001 112 TD 0 Tc ( )Tj 161 0 TD 0.0001 Tc (C)Tj 120 0 TD 0 Tc (Madson)Tj 305 0 TD (and)Tj 167.0001 0 TD -0.0001 Tc (R)Tj 119.9999 0 TD 0 Tc (Glenn)Tj 308.0001 0 TD -0.0001 Tc (The)Tj 174.9999 0 TD 0 Tc (use)Tj 150.0001 0 TD (of)Tj 105 0 TD -0.0001 Tc (HMA)Tj 183.9998 0 TD 0.0002 Tc (C)Tj -1633.9999 91.0001 TD 0 Tc (MD )Tj 306 0 TD (within)Tj 249 0 TD (ESP)Tj 183.0001 0 TD (and)Tj 159.9999 0 TD (AH)Tj 201 0 TD (Request)Tj 303.9999 0 TD 0.0001 Tc (for)Tj 128.0002 0 TD 0 Tc (Com)Tj -1531.0001 92 TD 0.0001 Tc (men)Tj 140.0001 0 TD -0.0001 Tc (ts)Tj 100.9999 0 TD 0 Tc [(Prop)-2000.1(osed)]TJ 382.0001 0 TD (Standard)Tj 378.9999 0 TD ()Tj 220.9999 0 TD 0.0002 Tc (In)Tj 69.0002 0 TD 0 Tc (ternet)Tj 241.9998 0 TD 0.0001 Tc (Engi)Tj -1533.9999 91 TD 0 Tc [(neering)-25999.9(T)]TJ 318 0 TD 0.0001 Tc [(ask)-25999.8(F)]TJ 179 0 TD 0 Tc [(orce)-26000(No)]TJ 277 0 TD (v)Tj 39.0001 0 TD -0.0001 Tc (em)Tj 96.9999 0 TD 2 Tc [(be)2000(r)-22000()2000()1999.9()2000()2000.1()]TJ -1071 112 TD 0 Tc ( )Tj 161 0 TD 0.0001 Tc (C)Tj 120 0 TD 0 Tc (Madson)Tj 305 0 TD (and)Tj 167.0001 0 TD -0.0001 Tc (R)Tj 119.9999 0 TD 0 Tc (Glenn)Tj 308.0001 0 TD -0.0001 Tc (The)Tj 174.9999 0 TD 0 Tc (use)Tj 150.0001 0 TD (of)Tj 105 0 TD -0.0001 Tc (HMA)Tj 183.9998 0 TD 0.0002 Tc (C)Tj -1633.9999 92 TD 0 Tc [(SHA)-29000(within)-30000(ESP)-29999.9(and)-30000(AH)]TJ 1111 0 TD [(Request)-28999.8(for)-31000(Com)]TJ -1111 91.0001 TD 0.0001 Tc (men)Tj 140.0001 0 TD -0.0001 Tc (ts)Tj 100.9999 0 TD 0 Tc [(Prop)-2000.1(osed)]TJ 382.0001 0 TD (Standard)Tj 378.9999 0 TD ()Tj 220.9999 0 TD 0.0002 Tc (In)Tj 69.0002 0 TD 0 Tc (ternet)Tj 241.9998 0 TD 0.0001 Tc (Engi)Tj -1533.9999 90.9999 TD 0 Tc [(neering)-25999.9(T)]TJ 318 0 TD 0.0001 Tc [(ask)-25999.8(F)]TJ 179 0 TD 0 Tc [(orce)-26000(No)]TJ 277 0 TD (v)Tj 39.0001 0 TD -0.0001 Tc (em)Tj 96.9999 0 TD 2 Tc [(be)2000(r)-22000()2000()1999.9()2000()2000.1()]TJ -1071 113 TD 0 Tc ( )Tj 161 0 TD 0.0001 Tc (D)Tj 132 0 TD 0 Tc (Maughan)Tj 393 0 TD 0.0001 Tc (M)Tj 143 0 TD 0 Tc (Sc)Tj 75 0 TD (hertler)Tj 302.0001 0 TD -0.0001 Tc (M)Tj 143 0 TD 0 Tc (Sc)Tj 75 0 TD (hneider)Tj 326.9998 0 TD (and)Tj -1589.9999 91 TD -0.0001 Tc (J)Tj 100 0 TD 0 Tc (T)Tj 49.0001 0 TD (urner)Tj 275.9999 0 TD (In)Tj 69 0 TD (ternet)Tj 239 0 TD (securit)Tj 220 0 TD (y)Tj 80 0 TD [(asso)-2000(ciation)]TJ 405.0001 0 TD (and)Tj 163 0 TD (k)Tj 38.9998 0 TD 0.0002 Tc (ey)Tj -1639.9999 91.0001 TD 0 Tc (managemen)Tj 396 0 TD (t)Tj 80 0 TD [(proto)-1999.9(col)]TJ 326 0 TD (ISAKMP)Tj 500.9999 0 TD (Request)Tj 319 0 TD 0.0001 Tc (for)Tj -1621.9999 91.9999 TD 0 Tc (Commen)Tj 298 0 TD [(ts)-22000.1(Prop)-2000(osed)-23000(Standard)-21999.9()-26000.1(In)]TJ 1073.0001 0 TD [(ternet)-21000.2(En)]TJ -1371.0001 91.0001 TD [(gineering)-26999.9(T)]TJ 378 0 TD [(ask)-26000(F)]TJ 179 0 TD [(orce)-26000(No)]TJ 277 0 TD (v)Tj 39 0 TD 0.0001 Tc (em)Tj 97.0001 0 TD 0 Tc [(b)-1999.9(e)0(r)-24000()]TJ -1131.0001 112 TD ( )Tj 161 0 TD [(D)-19999.9(McDonald)-22000.1(C)-21000.1(Metz)-22000(and)-20000(B)-20999.9(Phan)-25999.9(P)0.2(F)]TJ ET q 2.88 0 0 -0.48 255.348 104.448 cm /Im1 Do Q BT 0.12 0 0 -0.12 258.12 103.98 Tm 0.0002 Tc [(KEY)-19999.6(K)0.2(ey)]TJ -1389.9999 92.0001 TD 0 Tc (Managemen)Tj 401 0 TD (t)Tj 69.0001 0 TD (API)Tj 198.9999 0 TD (V)Tj 52 0 TD (ersion)Tj 235 0 TD 0.0001 Tc ()Tj 135 0 TD 0 Tc (Request)Tj 308.0001 0 TD -0.0001 Tc (for)Tj 132 0 TD 0 Tc (Com)Tj -1531.0001 90.9999 TD 0.0001 Tc (men)Tj 140.0001 0 TD -0.0001 Tc (ts)Tj 97 0 TD 0 Tc (Informational)Tj 554.9999 0 TD (\012)Tj 217 0 TD (In)Tj 69 0 TD (ternet)Tj 237.9999 0 TD (Engineering)Tj -1315.9999 91.0001 TD (T)Tj 49.0001 0 TD -0.0001 Tc [(ask)-26000.2(F)]TJ 178.9999 0 TD 0 Tc [(orce)-26000(July)-25999.9()]TJ 1636.0001 -5317 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc [(S)-24000(P)]TJ 133.9998 0 TD -0.0001 Tc [()-25000.3(M)-0.1(iller)-27000.3(B)-25000.3(C)-25000.1(Neuman)-22999.9(J)-26000.3(I)-24000.3(Sc)]TJ 1051.0002 0 TD [(hiller)-26000.1(and)-24000.1(J)-25000.1(H)]TJ -1185 92 TD 0 Tc (Saltzer)Tj 283.9998 0 TD [(Kerb)-2000(eros)-23999.8(authen)]TJ 554.0002 0 TD [(tication)-25000(and)-23999.8(authorization)]TJ -838 91 TD (system)Tj 283.9998 0 TD (T)Tj 49 0 TD (ec)Tj 66.0002 0 TD -0.0001 Tc [(hnical)-27000.3(rep)-2000.3(o)-0.1(rt)-26000.1(M)-0.3(IT)-27000.3(D)0.1(ecem)]TJ 906 0 TD 0 Tc [(b)-2000(e)0(r)-24000(\012)]TJ -1466 124 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc (R)Tj 116.9998 0 TD (T)Tj 116 0 TD (Morris)Tj 317.0002 0 TD (A)Tj 97 0 TD (W)Tj 72.9998 0 TD (eakness)Tj 289.0002 0 TD (in)Tj 104 0 TD (the)Tj 146 0 TD (BSD)Tj 293 0 TD (Unix)Tj -1552 92 TD -0.0001 Tc (TCPIP)Tj 320 0 TD 0 Tc (Soft)Tj 131.9998 0 TD (w)Tj 53.0002 0 TD (are)Tj 196.9998 0 TD (Computing)Tj 414 0 TD (Science)Tj 282.0002 0 TD (T)Tj 49 0 TD (ec)Tj 66 0 TD -0.0001 Tc (hnical)Tj -1513 91 TD -0.0002 Tc [(Rep)-2000.4(o)-0.2(rt)]TJ 281 0 TD 0 Tc (\012)Tj 188 0 TD (A)Tj 51.9998 0 TD 0.0001 Tc (TT)Tj 217.0002 0 TD 0 Tc (Bell)Tj 177.9998 0 TD [(Lab)-2000.2(oratories)]TJ 496.0002 0 TD (F)Tj 44 0 TD 0.0001 Tc (ebruary)Tj -1456 91 TD -0.0001 Tc ( )Tj -161 125 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc [(Data)-26000(Encryption)-24999.8(Standard)-24999.8(Jan)]TJ 1063 0 TD [(uary)-25999.8(\012\012)]TJ -1224 124 TD 0.0001 Tc ( \012)Tj 161 0 TD 0 Tc [(Digital)-27000(Signature)-26000.2(Standard)-24999.8(Ma)]TJ 1061 0 TD 0.0001 Tc [(y)-25999.7()]TJ -1222 125 TD ( )Tj 161 0 TD 0 Tc [(Secure)-26000.2(Hash)-26999.8(Standard)-25999.8(April)-26000( )]TJ 1206 0 TD [(Also)-27000(kno)]TJ 294 0 TD -0.0001 Tc [(wn)-26000.1(as)]TJ -1500 90.9995 TD 0 Tc [( )-25999.8(F)]TJ 145.9998 0 TD [(ed)-26000(Reg)-25000( \012)-27999.8()-0.2()]TJ -306.9998 125 TD 0.0001 Tc ( )Tj 161 0 TD -0.0002 Tc (D)Tj 114 0 TD 0 Tc [(Pip)-2000(e)0.2(r)]TJ 262 0 TD (The)Tj 165.9998 0 TD 0.0002 Tc (in)Tj 62 0 TD 0.0001 Tc (ternet)Tj 235 0 TD 0 Tc (IP)Tj 114 0 TD (securit)Tj 220.0002 0 TD (y)Tj 74 0 TD (domain)Tj 281.9995 0 TD (of)Tj 95.0005 0 TD (in)Tj -1624 91.0005 TD [(terpretation)-31000.2(for)-32000(ISAKMP)]TJ 936 0 TD [(Request)-30000(for)-31000(Commen)]TJ 719 0 TD (ts)Tj -1655 91 TD [(Prop)-2000(osed)]TJ 388 0 TD (Standard)Tj 384 0 TD (\012)Tj 228 0 TD -0.0002 Tc (In)Tj 69 0 TD 0 Tc (ternet)Tj 247 0 TD (Engineering)Tj -1316 91.9995 TD (T)Tj 49 0 TD -0.0001 Tc [(ask)-26000.1(F)]TJ 178.9998 0 TD 0 Tc [(orce)-26000(No)]TJ 277.0002 0 TD (v)Tj 39 0 TD -0.0002 Tc (em)Tj 96.9998 0 TD 0 Tc [(b)-2000.2(e)0.2(r)-24000.2()]TJ -801.9998 124.0005 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc [(J)-28000(P)]TJ 138 0 TD (ostel)Tj 214.9998 0 TD [(Domain)-27000(name)-27000.2(system)-27000(s)-0.2(tructure)-27000(and)-27000.5(d)0(el)]TJ -352.9998 92 TD (egation)Tj 351 0 TD (Request)Tj 312 0 TD (for)Tj 135 0 TD (Commen)Tj 298 0 TD -0.0002 Tc (ts)Tj 102 0 TD 0 Tc (Informational)Tj -1198 91 TD -0.0001 Tc [( )-23000.1(I)-0.3(n)]TJ 264.9998 0 TD 0 Tc [(ternet)-19000(Engineering)-21999.8(T)]TJ 688 0 TD 0.0001 Tc [(ask)-19999.9(F)]TJ 173 0 TD 0 Tc [(orce)-22000(Marc)]TJ 349.0002 0 TD -0.0001 Tc [(h)-21000.1()]TJ -1636 125 TD 0.0001 Tc ( )Tj 161 0 TD -0.0001 Tc [(Jon)-32000.1(P)]TJ 201.9998 0 TD 0.0001 Tc (ostel)Tj 226 0 TD 0.0002 Tc (In)Tj 69.0002 0 TD 0 Tc [(ternet)-30999.8(Proto)-2000.2(c)0.2(ol)]TJ 589 0 TD -0.0002 Tc (In)Tj 69 0 TD 0 Tc [(ternet)-30000(RF)]TJ 335.9995 0 TD -0.0002 Tc [(C)-31000.7(\012)]TJ -1490.9995 90.9998 TD -0.0001 Tc ()Tj -161 124 TD 0.0001 Tc ( )Tj 161 0 TD -0.0001 Tc [(Jon)-19000.3(P)]TJ 189 0 TD 0 Tc [(ostel)-24000.2(T)]TJ 247 0 TD [(ransmission)-19000(Con)]TJ 541.9998 0 TD [(trol)-19000(Proto)-2000.2(col)-25000(In)]TJ 536.0002 0 TD (ternet)Tj -1514 92.0002 TD (RF)Tj 105 0 TD [(C)-26000(\012)-27000()]TJ -266 124 TD 0.0001 Tc ( )Tj 161 0 TD -0.0001 Tc (Niels)Tj 216.9998 0 TD 0.0001 Tc (Pro)Tj 118.0002 0 TD 0 Tc (v)Tj 39 0 TD (os)Tj 121 0 TD (and)Tj 175 0 TD -0.0002 Tc (Da)Tj 94.9998 0 TD 0 Tc (vid)Tj 157.0002 0 TD -0.0001 Tc (Mazi)Tj 160.9998 0 TD 0 Tc ()Tj 2.0002 0 TD (eres)Tj 264 0 TD (A)Tj 110 0 TD (Future)Tj -1459 92 TD [(Adaptable)-25000(P)]TJ 423 0 TD -0.0001 Tc (assw)Tj 151 0 TD [(ord)-28000.3(S)-0.1(c)]TJ 214 0 TD 0 Tc (heme)Tj 230 0 TD (In)Tj /T16 1 Tf 95.9998 0 TD (Pr)Tj 80.0002 0 TD (o)Tj 34.9998 0 TD (c)Tj 31.0002 0 TD (e)Tj 30.9998 0 TD (e)Tj 31.0002 0 TD [(dings)-30000(of)-27000(the)]TJ -1322 90.9998 TD (A)Tj 55 0 TD [(nnual)-28000.2(USENIX)-27000(T)]TJ 585.9998 0 TD (e)Tj 31.0002 0 TD (chnic)Tj 172 0 TD -0.0001 Tc [(al)-28000.3(Confer)]TJ 311 0 TD 0 Tc (enc)Tj 108.9998 0 TD (e)Tj /T15 1 Tf 35.0002 0 TD [()-27000()]TJ -1460 124.0002 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc (R)Tj 115.9998 0 TD 0.0001 Tc (Riv)Tj 117 0 TD 0 Tc (est)Tj 187.0002 0 TD (The)Tj 170.9998 0 TD (MD )Tj 205 0 TD (MessageDigest)Tj 553.0002 0 TD -0.0001 Tc (Algorithm)Tj -1349 92 TD -0.0002 Tc (In)Tj 69 0 TD 0 Tc [(ternet)-25000.2(R)0.2(F)]TJ 331 0 TD [(C)-25000()-28000(April)-25000()]TJ -561 124 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc (Bruce)Tj 236 0 TD -0.0002 Tc (Sc)Tj 75 0 TD 0 Tc (hneier)Tj 305.9998 0 TD (Description)Tj 424 0 TD (of)Tj 103.0002 0 TD (a)Tj 79 0 TD (New)Tj 188 0 TD (V)Tj 52 0 TD 0.0001 Tc (ariable)Tj -1463 91.9998 TD 0 Tc [(Length)-17999.8(Key)]TJ 382.9998 0 TD [()-19000.2(Bit)-19000(Blo)-1999.8(c)]TJ 413 0 TD [(k)-18000(C)-0.2(ipher)-19000.2(Blo)]TJ 445 0 TD -0.0001 Tc [(wsh)-22000.6(I)-0.1(n)]TJ /T16 1 Tf 333.0002 0 TD 0 Tc (F)Tj 43.9995 0 TD 0.0003 Tc (ast)Tj -1617.9995 91.0002 TD 0 Tc (Softwar)Tj 249 0 TD (e)Tj 83.9998 0 TD (Encryption)Tj 447.0002 0 TD (Cambridge)Tj 406 0 TD -0.0002 Tc (Se)Tj 74 0 TD -0.0001 Tc (curity)Tj 243 0 TD 0 Tc (Work )Tj -1503 90.9998 TD -0.0001 Tc (shop)Tj 184.9998 0 TD 0.0002 Tc (Pr)Tj 80 0 TD 0 Tc (o)Tj 35.0002 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD -0.0001 Tc (dings)Tj /T15 1 Tf 171.9998 0 TD 0 Tc ()Tj 62 0 TD 0.0001 Tc (pages)Tj 219.0002 0 TD 0 Tc (\015)Tj 326 0 TD 0.0001 Tc (SpringerV)Tj 360 0 TD -0.0002 Tc (erlag)Tj -1532 92 TD 0 Tc (Decem)Tj 224 0 TD [(b)-2000(e)0.2(r)-25000()]TJ -385 124.0002 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc [(William)-19000(S)0.2(impson)-21000(IP)-17999.8(in)-18000(IP)-18999.8(T)]TJ 938 0 TD [(unneling)-21999.8(In)]TJ 398 0 TD 0.0001 Tc [(ternet)-16999.4(RF)]TJ 323 0 TD 0 Tc (C)Tj -1659 91 TD [( )-27000.2(Octob)-2000(er)-26000.2( )]TJ -161 125 TD 0.0001 Tc ( \012)Tj 161 0 TD 0 Tc [(Secure)-17000(Syslog)]TJ /T17 1 Tf 488 0 TD [(http wwwcoresdicomCore)-999.5(SDI)]TJ -488 90.9998 TD [(englishsloggingssysloghtm)-1000.2(l)]TJ /T15 1 Tf 1171 0 TD ()Tj -1332 125 TD 0.0001 Tc ( )Tj 161 0 TD 0 Tc [(T)-25000(Ylonen)-24999.8(T)-25000.2(Kivinen)-24000(M)-26000(Saarinen)-25000(T)-25000(Rinne)-24000.5(and)]TJ 0 91.0002 TD (S)Tj 99 0 TD (Leh)Tj 122.9998 0 TD (tinen)Tj 253.0002 0 TD (SSH)Tj 177.9998 0 TD [(proto)-2000(col)]TJ 310.0002 0 TD (arc)Tj 100 0 TD (hitecture)Tj 382 0 TD (In)Tj 69 0 TD (ternet)Tj -1514 90.9999 TD (Draft)Tj 239.9998 0 TD 0.0002 Tc (In)Tj 69 0 TD 0.0001 Tc (ternet)Tj 235.0002 0 TD 0 Tc (Engineering)Tj 433.9998 0 TD (T)Tj 49 0 TD (ask)Tj 145.0002 0 TD (F)Tj 43.9998 0 TD (orce)Tj 196.0002 0 TD (F)Tj 44 0 TD 0.0001 Tc (ebruary)Tj -1456 92 TD -0.0001 Tc ()Tj 208.9998 0 TD 0 Tc (W)Tj 73.0002 0 TD [(ork)-24999.8(in)-26000(progress)]TJ ET endstream endobj 47 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /T15 43 0 R /T16 44 0 R /T17 48 0 R >> /XObject << /Im1 23 0 R >> /ExtGState << /GS1 12 0 R >> >> endobj 23 0 obj << /Type /XObject /Subtype /Image /Width 1 /Height 1 /BitsPerComponent 1 /ImageMask true /Length 2 >> stream endstream endobj 12 0 obj << /Type /ExtGState /SA false /SM 0.02 /OP false /op false /OPM 1 /BG2 /Default /UCR2 /Default /HT /Default /TR2 /Default >> endobj 49 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 662 /Descent -250 /Flags 34 /FontBBox [-168 -218 1000 898] /FontName /Times-Roman /ItalicAngle 0 /StemV 84 /XHeight 450 /StemH 84 >> endobj 50 0 obj << /ProcSet [/PDF /ImageB ] >> endobj 4 0 obj << /Name /T1 /Type /Font /Subtype /Type3 /Resources 50 0 R /FontBBox [1 -21 91 70] /FontMatrix [1 0 0 -1 0 0] /FirstChar 0 /LastChar 121 /Encoding 51 0 R /CharProcs 52 0 R /Widths [31 56 56 56 37 56 56 56 56 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 85 80 81 86 0 0 88 0 42 0 0 0 0 88 84 77 0 84 62 0 0 0 0 0 0 0 0 0 0 0 0 0 54 62 50 62 51 34 56 62 32 0 59 32 94 62 56 62 0 46 44 44 62 59 81 0 59 ] /ToUnicode 53 0 R >> endobj 51 0 obj << /Type /Encoding /Differences [0/: /1 /2 /3 /- /4 /5 /6 /7 /8 65/A /B /C /D 71/G 73/I 78/N /O /P 82/R /S 97/a /b /c /d /e /f /g /h /i 107/k /l /m /n /o /p 114/r /s /t /u /v /w 121/y ] >> endobj 52 0 obj << /: 54 0 R /1 55 0 R /2 56 0 R /3 57 0 R /- 58 0 R /4 59 0 R /5 60 0 R /6 61 0 R /7 62 0 R /8 63 0 R /A 64 0 R /B 65 0 R /C 66 0 R /D 67 0 R /G 68 0 R /I 69 0 R /N 70 0 R /O 71 0 R /P 72 0 R /R 73 0 R /S 74 0 R /a 75 0 R /b 76 0 R /c 77 0 R /d 78 0 R /e 79 0 R /f 80 0 R /g 81 0 R /h 82 0 R /i 83 0 R /k 84 0 R /l 85 0 R /m 86 0 R /n 87 0 R /o 88 0 R /p 89 0 R /r 90 0 R /s 91 0 R /t 92 0 R /u 93 0 R /v 94 0 R /w 95 0 R /y 96 0 R >> endobj 54 0 obj << /Length 170 >> stream 31 0 8 0 23 44 d1 q 15 0 0 44 8.1 -0.1 cm BI /W 15 /H 44 /BPC 1 /IM true ID ј?рР Ррј?џџџџџџџџџџџџџџџџџџџџџџџџџџџџј?рР Ррј? EI Q endstream endobj 55 0 obj << /Length 407 >> stream 56 0 9 0 47 65 d1 q 38 0 0 65 9.1 -0.1 cm BI /W 38 /H 65 /BPC 1 /IM true ID џџќ?џџџј?џџџр?џџџ?џџќ ?џџР ?џ ?џ ?џ ?џ ?џ <