tree a7ba8ab671228eb24f9e3ec6218bd9ac80f72131
parent e8b28db08622accdb1d1ff503a7084f067d60fc8
author Samuel Jero <samuel.jero@ll.mit.edu> 1537540468 -0400
committer Thomas Vachuska <tom@opennetworking.org> 1539791971 +0000

Secure LLDP-based Topology Detection

Current LLDP/BDDP-based Topology Detection is vulnerable to the
creation of fake links via forged, modified, or replayed LLDP packets.
This patch fixes this vulnerability by authenticating LLDP/BDDP packets
using a Message Authentication Code and adding a timestamp to prevent
replay. We use HMAC with SHA-256 has our Messge Authentication Code and
derive the key from the config/cluster.json file via the
ClusterMetadata class.

Change-Id: I01dd6edc5cffd6dfe274bcdb97189f2661a6c4f1