论文信息 - Algorithms for Internet Key Exchange version 1 (IKEv1)

Algorithms for Internet Key Exchange version 1 (IKEv1)

The required and suggested algorithms in the original Internet Key Exchange version 1 (IKEv1) specification do not reflect the current reality of the IPsec market requirements. The original specification allows weak security and suggests algorithms that are thinly implemented. This document updates RFC 2409, the original specification, and is intended for all IKEv1 implementations deployed today. [STANDARDS-TRACK]

Paul E. Hoffman | P. Hoffman

[1] Dan Harkins,et al. The Internet Key Exchange (IKE) , 1998, RFC.

[2] Sheila Frankel,et al. The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec , 2003, RFC.

[3] Sheila Frankel,et al. The AES-CBC Cipher Algorithm and Its Use with IPsec , 2003, RFC.

[4] Scott O. Bradner,et al. Key words for use in RFCs to Indicate Requirement Levels , 1997, RFC.

[5] Paul E. Hoffman. The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE) , 2006, RFC.

[6] Tero Kivinen,et al. More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE) , 2003, RFC.