A HashChain-based Partial Matching Embedded Manifest for NDN

Abstract

With increased emphasis on security, per-packet verification has been noted as one of the essential parts of the future Internet design. NDN offers various packet signature types, such as RSA, ECDSA, SHA-256, and the embedded manifest for per-packet verification. However, we argue that even the most optimized form of verification, which is the embedded manifest can further optimized for higher performance to deal with ever increasing traffic. In this paper, we propose a novel HashChain-based partial matching embedded manifest scheme for NDN, which further optimizes already optimized embedded manifests for better efficiency. We present an analysis of benefits of adopting the scheme in comparison with the existing embedded manifest and the HashChain based scheme.