The fix for BGP’s weaknesses – RPKI – has issues of its own

Oct. 2, 2024 - The Register

The Resource Public Key Infrastructure (RPKI) protocol has "software vulnerabilities, inconsistent specifications, and operational challenges" according to a pre-press paper from a trio of German researchers. RPKI was designed to fix problems caused by the fact that Border Gateway Protocol (BGP) – the protocol that manages the routes traffic can traverse across the internet – was not secure by design.

Schulmann and Vogel summarized the paper in a post on the Asia Pacific Network Information Center's blog:The RPKI specifications, RPKI software packages, and RPKI repository implementations are still not sufficiently stable and contain critical vulnerabilities. Overall, at least 53 vulnerabilities in RPKI software packages were disclosed, including persistent DoS, authentication bypass, cache poisoning, and remote-code-execution.

The authors therefore suggest using their paper as a To-Do list for those who work on RPKI...