Requirements on IPsec Protocol, No.970, AUTOSAR 21-11 (73) AP

Requirements on IPsec Protocol, No.970, 2021-11

https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_RS_IPsecProtocol.pdf


AUTOSAR R21-11記事一覧はこちら。

AUTOSAR 21-11, 42文書読んだ。2022年5月中に半分到達予定。

https://qiita.com/kaizen_nagoya/items/648b32867635993410c8

AUTOSAR R21-11(0) 仕様ダウンロード一覧。単語帳。参考文献資料作成

https://qiita.com/kaizen_nagoya/items/9b3a1b9b8d1e8d7e288e

# 用語(terms)
|Term| Description|
|:--|:--|
|AH |Authentication Header
|DB |Database
|ESP| Encapsulating Security Payload
|ICV |Integrity Check Value
|IKE| Internet Key Exchange
|IKEv2| Internet Key Exchange version 2
|IP |Internet Protocol
|IPsec |Internet Protocol Security
|PAD |Peer Authorization Database
|PKI| Public Key Infrastructure
|PSK| Pre-Shared Keys
|RAM |Random Access Memory
|SA |Security Association
|SAD| Security Association Database
|SPD| Security Policy Database
|TCP/IP |Transmission Control Protocol / Internet Protocol
|V2X |Vehicle to everything

## 英日
日本語は仮訳
|no.|count|word|日本語|
|:----|:----|:----|:----|
|1|132|rs_ipsec_|rs_ipsec_|
|2|76|the|その|
|3|71|rs_main_|rs_main_|
|4|68|rfc|request for commnet(短縮名)|
|5|66|in|中に|
|6|62|ipsec|ipsec|
|7|60|shall|しなければならない|
|8|56|to|に|
|9|54|ietf|ietf|
|10|53|be|です|
|11|53|of|の|
|12|40|and|と|
|13|37|security|安全|
|14|37|support|対応|
|15|37|use|使う|
|16|35|communication|通信|
|17|32|ikev|ikev|
|18|32|requirements|要件|
|19|31|autosar|autosar|
|20|30|description|説明|
|21|30|material|材料|
|22|29|document|資料|
|23|29|protocol|規約|
|24|28|for|にとって|
|25|28|secure|安全|
|26|28|vehicle|車両|
|27|27|c|c|
|28|27|case|場合|
|29|27|d|d|
|30|27|dependencies|依存関係|
|31|27|rationale|理論的根拠|
|32|27|supporting|対応|
|33|27|used|使った|
|34|25|authentication|認証|
|35|23|on|の上|
|36|22|according|によると|
|37|22|with|と|
|38|20|ip|internet protocol(短縮名)|
|39|20|keys|鍵|
|40|20|r|r|
|41|18|is|です|
|42|18|standard|標準|
|43|16|autosar_rs_ipsecprotocol|autosar_rs_ipsecprotocol|
|44|16|fo|foundation(短縮名)|
|45|16|id|id|
|46|15|by|に|
|47|15|encryption|暗号化|
|48|15|following|続く|
|49|15|section|節|
|50|14|esp|esp|
|51|14|industry|業界|
|52|14|internet|網際|
|53|14|not|いいえ|
|54|13|supported|対応している|
|55|12|database|データベース|
|56|12|mode|状態|
|57|11|ah|ああ|
|58|11|algorithm|算法|
|59|11|key|鍵|
|60|11|may|かもしれない|
|61|11|sas|sas|
|62|10|aes|aes|
|63|10|any|どれか|
|64|10|as|なので|
|65|10|it|それ|
|66|10|or|また|
|67|9|algorithms|算法|
|68|9|exchange|両替|
|69|9|pre|前の(接頭辞）|
|70|9|shared|共有|
|71|9|suite|揃い|
|72|8|bit|少し|
|73|8|counter|計数器|
|74|8|s|s|
|75|8|work|仕事|
|76|7|are|それは|
|77|7|encapsulating|封入する|
|78|7|if|もしも|
|79|7|implementation|実装|
|80|7|payload|負荷|
|81|7|peer|対等の|
|82|7|psk|psk|
|83|7|this|これ|
|84|6|a|a|
|85|6|all|すべて|
|86|6|configurable|構成可能|
|87|6|cryptographic|暗号|
|88|6|galois|ガロア（人名）|
|89|6|release|公開|
|90|6|spd|spd|
|91|5|an|一つの|
|92|5|authorization|承認|
|93|5|b|b|
|94|5|based|基づいて|
|95|5|check|検査する|
|96|5|code|符号|
|97|5|directly|直接|
|98|5|draft|原案|
|99|5|enable|有効|
|100|5|gmac|gmac|
|101|5|header|見出し|
|102|5|icv|icv|
|103|5|implemented|実装|
|104|5|integrity|威厳|
|105|5|management|管理|
|106|5|message|伝言|
|107|5|no|いいえ|
|108|5|over|以上|
|109|5|pad|pad|
|110|5|policy|政策|
|111|5|provided|用意した|
|112|5|secured|確保|
|113|5|tcp|tcp|
|114|5|that|それ|
|115|5|up|上|
|116|5|v|v|
|117|5|value|価値|
|118|5|which|どれの|
|119|5|x|x|
# 参考(reference)

[1] Standardization Template, AUTOSAR_TPS_StandardizationTemplate
[2] Glossary, AUTOSAR_TR_Glossary
https://www.autosar.org/fileadmin/standards/foundation/21-11/AUTOSAR_TR_Glossary.pdf
[3] Explanation of IPsec Implementation Guidelines, AUTOSAR_EXP_IPsecImplementationGuidelines
[4] strongSwan website, https://www.strongswan.org
[5] RFC 4301, Security Architecture for the Internet Protocol
[6] RFC 4302, IP Authentication Header
[7] RFC 4303, IP Encapsulating Security Payload (ESP)
[8] RFC 7296, Internet Key Exchange Protocol Version 2 (IKEv2)
[9] RFC 4304, Extended Sequence Number (ESN) Addendum to IPsec Domain of Interpretation (DOI) for Internet Security Association
[10] RFC 8221, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
[11] RFC 4478, Repeated Authentication in Internet Key Exchange (IKEv2) Protocol
[12] RFC 3706, A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers
[13] RFC 7427, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
[14] RFC 4543, The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH
[15] RFC 4494, The AES-CMAC-96 Algorithm and Its Use with IPsec
[16] RFC 4106, The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)
[17] RFC 4309, Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP)
[18] RFC 6379, Suite B Cryptographic Suites for IPsec
[19] RFC 8247, Algorithm Implementation Requirements and Usage Guidance for the Internet Key Exchange Protocol Version 2 (IKEv2)
[20] Requirements on AUTOSAR Features
AUTOSAR_RS_Features