Cryptographically Generated Address

• A private/public key pair is generated for a node

• Interface ID is calculated as an public key fingerprint

• Subnet prefix and interface ID are concatenated

• Duplicate Address Detection is performed (CGA is re-calculated if necessary – up to 3 times)

• CGA parameter is formed:

  • IPv6 address
  • Public key
  • Some additional parameters

• DNS and other records are updated..

The random modifier allows to change the fingerprint (IP address) periodically