BGP uses MD5 to authenticate every BGP routing protocol TCP segment and establish peering.
The computed MD5 hash is based on the following –
- IP header
- TCP header
- TCP Payload
- Shared Secret (key or password)
The computed hash is stored in TCP option 19. The router authenticates the source of each BGP routing protocol packet it receives.