A Survey of Methods of VPN Tunnels Implementation

The main objective of this final qualifying paper is to research IPsec ESP transport layer protocol which uses Russian cryptographic tools, write and test its software implementation. To solve this task, it was done: • Exploring the draft document on the use of Russian cryptographic algorithms in IPsec ESP security protocol; • Researching the mechanism of secure interaction according to guidelines «МР 26.4.003-2018» (FIOT) and its software implementation in the libakrypt cryptographic C library; • Integration of the IPsec ESP written software implementation into the FIOT secure communication mechanism to ensure that the ESP protocol is operational and can be tested. Additionally, the following tasks were solved: • Researching the use of UDP in the FIOT protocol and writing the appropriate software implementation; • Implementation of the policies for hiding length of transmitted messages in FIOT. The obtained results on writing the software implementation of the ESP were used for verification of control examples of the draft recommendations on standardization of the use of IPsec ESP with Russian cryptographic algorithms. The results of the FIOT protocol message padding policies research can be used for further exploring on protection against hidden side channels attacks.