2 ms·
The 64-bit host space is used by SEND to hold a cryptographic key as part of a method of securing neighbor discovery. 16 or 32 bits would be laughably inadequat
by Dagger2 2y ago
The 64-bit host space is used by SEND to hold a cryptographic key as part of a method of securing neighbor discovery. 16 or 32 bits would be laughably inadequate for that. It's also used as a passive defence against IP scanning, making it significantly harder for worms to spread by brute-force scanning.
I admit it does make the address space look a bit lop-sided, but taking bits away from the host side (where they're being used) and giving them to the network side (where we should already have enough space anyway) wouldn't be a sensible trade.
- UltraSane 2y agoThat is a clever hack made necessary by the lack of crypto as part of the IPv6 protocol like it should have been. If they were more ambitious they would have built something like the Locator/ID Separation Protocol (LISP) (RFC 6830) directly into IPv6 but used public keys as the ID.