Light-weight mechanism for checking message integrity in data packets
This disclosure presents a technique to include a packet sequence number and an integrity check value (ICV) into a data frame while maintaining a total number of transmitted bytes. A transmitting device includes circuitry that generates the ICV, inserts a transmitter packet sequence number into the data frame that includes a data packet including a payload, the data packet following a preamble and an interpacket gap (IPG) following the data packet. The circuitry also inserts the ICV into the data frame, and transmits the data frame, wherein inserting the ICV into the data frame reduces a size of the IPG while maintaining a total number of bytes in the data frame. A receiving device includes circuitry that receives the data frame, compares a receiver packet sequence number to the transmitter packet sequence number, and determines whether the transmitter packet sequence number is valid based on the receiver packet sequence number.
1. A transmitting device, comprising:
processing circuitry configured to
maintain a transmitter packet sequence counter;
generate an integrity check value (ICV);
insert a transmitter packet sequence number according to the transmitter packet sequence counter into a data frame that includes a data packet, the data packet including a payload, wherein the data packet follows a preamble and an interpacket gap (IPG) follows the data packet;
insert the ICV into the data frame; and
transmit the data frame, wherein
the processing circuitry maintains the transmitter packet sequence counter by incrementing a transmitter packet sequence counter value by one with each data frame transmitted, and
inserting the ICV into the data frame reduces the size of the IPG while maintaining a total number of bytes in the data frame.
2. The transmitting device of claim 1 , wherein the processing circuitry generates the ICV using a truncated keyed-hash based on at least a portion of the data packet and the transmitter packet sequence number.
3. The transmitting device of claim 1 , wherein the size of the data frame increases by less than 50%.
4. The transmitting device of claim 1 , wherein
at least a portion of the data packet is encrypted using an a cryptographic protocol,
at least one security field is inserted into the data frame, and
the insertion of the at least one security field reduces the size of the IPG.
5. The transmitting device of claim 1 , wherein the processing circuitry inserts the transmitter packet sequence number into the data frame in the preamble.
6. The transmitting device of claim 1 , wherein the processing circuitry inserts the ICV into the data frame after the payload.
7. The transmitting device of claim 1 , wherein the transmitter packet sequence counter is 32-bit.
8. An apparatus, comprising:
processing circuitry configured to
receive a data frame including a transmitter packet sequence number, an integrity check value (ICV), and a data packet, the data packet including a payload, wherein the data packet follows a preamble and an interpacket gap (IPG) follows the data packet;
compare a receiver packet sequence number from a receiver packet sequence counter to the transmitter packet sequence number;
determine whether the transmitter packet sequence number is valid based on the receiver packet sequence number;
in response to determining that the transmitter packet sequence number is valid, determine whether the ICV is valid; and
in response to determining that the ICV is valid,
remove the transmitter packet sequence number and the ICV from the data frame; and
maintain the receiver packet sequence counter by incrementing a sequence counter value by one with each data frame received, wherein
removal of the transmitter packet sequence number and the ICV restores the format of the data frame to a format readable by a data-link layer, and
the processing circuitry maintains the receiver packet sequence counter by incrementing the receiver packet sequence counter by one with each data frame received.
9. The apparatus of claim 8 , wherein the processing circuitry is further configured to discard the data frame in response to determining the transmitter packet sequence number is invalid.
10. The apparatus of claim 8 , wherein the processing circuitry is further configured to discard the data frame in response to determining the ICV is invalid.
11. A method performed by a transmitting device that communicates with a receiving device via a network, the method comprising:
maintaining a transmitter packet sequence counter;
generating an integrity check value (ICV);
inserting, by processing circuitry of the transmitting device, a transmitter packet sequence number into a data frame that includes a data packet, the data packet including a payload,
wherein the data packet follows a preamble and an interpacket gap (IPG) follows the data packet;
inserting, by the processing circuitry, the ICV into the data frame; and
transmitting the data frame, wherein
the maintaining the transmitter packet sequence counter includes incrementing a transmitter packet sequence counter value by one with each data frame transmitted, and
inserting the ICV into the data frame reduces a size of the IPG while maintaining a total number of bytes in the data frame.
12. The method of claim 11 , wherein generating the ICV uses a truncated keyed-hash based on at least a portion of the data packet and the transmitter packet sequence number.
13. The method of claim 11 , wherein inserting the transmitter packet sequence number and ICV into the data frame increases a size of the data frame.
14. The method of claim 13 , wherein the size of the data frame increases by less than 50%.
15. The method of claim 11 , wherein
at least a portion of the data packet is encrypted using a cryptographic protocol,
at least one security field is inserted into the data frame, and
the insertion of the at least one security field reduces the size of the IPG.
16. The method of claim 11 , wherein the processing circuitry inserts the transmitter packet sequence number into the data frame in the preamble.
17. A transmitting device, comprising:
processing circuitry configured to
generate an integrity check value (ICV) using a truncated keyed-hash based on at least a portion of a data packet and a transmitter packet sequence number; and
insert the ICV into a data frame that includes the data packet, the data packet including a payload, wherein
the data packet follows a preamble and an interpacket gap (IPG) follows the data packet, and
inserting the ICV into the data frame reduces the size of the IPG while maintaining a total number of bytes in the data frame.
18. The transmitting device of claim 17 , wherein the processing circuitry wherein the processing circuitry inserts the ICV into the data frame after the payload.
19. An apparatus, comprising:
processing circuitry configured to
maintain a transmitter packet sequence counter;
insert a transmitter packet sequence number according to the transmitter packet sequence counter into a data frame that includes a data packet, the data packet including a payload, wherein the data packet follows a preamble and an interpacket gap (IPG) follows the data packet; and
transmit the data frame, wherein
the processing circuitry maintains the transmit packet sequence counter by incrementing a transmitter packet sequence counter value by one with each data frame transmitted, and
inserting the transmitter packet sequence number into the data frame reduces the size of the IPG while maintaining a total number of bytes in the data frame.
20. The transmitting device of claim 19 , wherein the processing circuitry is further configured to generate an ICV using a truncated keyed-hash based on at least a portion of the data packet and the transmitter packet sequence number and to insert the ICV into the data frame.