2409: The Internet Key Exchange (IKE).

HTML TXT PS PDF

ISAKMP ([MSST98]) provides a framework for authentication and key exchange but does not define them. ISAKMP is designed to be key exchange independant; that is, it is designed to support many different key exchanges.

Status PROPOSED STANDARD
Format TXT=94949 bytes
Authors D. Carrel
Date November 1998
Keyphrases key payload ISAKMP encryption

Obsoleted by

RFC4306: Internet Key Exchange (IKEv2) Protocol.

Updated by

RFC4109: Algorithms for Internet Key Exchange version 1 (IKEv1).

References

RFC1321: The MD5 Message-Digest Algorithm.
RFC2104: HMAC: Keyed-Hashing for Message Authentication.
RFC2119: Key words for use in RFCs to Indicate Requirement Levels.
RFC2144: The CAST-128 Encryption Algorithm.
RFC2405: The ESP DES-CBC Cipher Algorithm With Explicit
RFC2407: The Internet IP Security Domain of Interpretation for
RFC2408: Internet Security Association and Key Management Protocol (ISAKMP).
RFC2412: The OAKLEY Key Determination Protocol.

Referenced by

RFC2401: Security Architecture for the Internet Protocol.
RFC2402: IP Authentication Header.
RFC2406: IP Encapsulating Security Payload (ESP).
RFC2407: The Internet IP Security Domain of Interpretation for
RFC2408: Internet Security Association and Key Management Protocol (ISAKMP).
RFC2410: The NULL Encryption Algorithm and Its Use With IPsec.
RFC2628: Simple Cryptographic Program Interface (Crypto API).
RFC2663: IP Network Address Translator (NAT) Terminology and Considerations.
RFC2709: Security Model with Tunnel-mode IPsec for NAT Domains.
RFC2719: Framework Architecture for Signaling Transport.
RFC2764: A Framework for IP Based Virtual Private Networks.
RFC2786: Diffie-Helman USM Key Management Information Base and Textual Convention.
RFC2825: A Tangled Web: Issues of I18N, Domain Names, and the Other Internet protocols. IAB, L. Daigle, ed..
RFC2828: Internet Security Glossary.
RFC2885: Megaco Protocol version 0.8.
RFC2888: Secure Remote Access with L2TP.
RFC2960: Stream Control Transmission Protocol.
RFC2977: Mobile IP Authentication, Authorization, and Accounting Requirements.
RFC3015: Megaco Protocol Version 1.0.
RFC3051: IP Payload Compression Using ITU-T V.44 Packet Method.
RFC3104: RSIP Support for End-to-end IPsec.
RFC3129: Requirements for Kerberized Internet Negotiation of Keys.
RFC3168: The Addition of Explicit Congestion Notification (ECN) to
RFC3173: IP Payload Compression Protocol (IPComp).
RFC3193: Securing L2TP using IPsec.
RFC3219: Telephony Routing over IP (TRIP).
RFC3316: Internet Protocol Version 6 (IPv6) for Some Second and Third Generation Cellular Hosts.
RFC3329: Security Mechanism Agreement for the Session Initiation Protocol (SIP).
RFC3456: Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode.
RFC3457: Requirements for IPsec Remote Access Scenarios.
RFC3473: Generalized Multi-Protocol Label Switching (GMPLS) Signaling Resource ReserVation Protocol-Traffic Engineering (RSVP-TE) Extensions.
RFC3525: Gateway Control Protocol Version 1.
RFC3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE).
RFC3539: Authentication, Authorization and Accounting (AAA) Transport Profile.
RFC3547: The Group Domain of Interpretation.
RFC3554: On the Use of Stream Control Transmission Protocol (SCTP) with IPsec.
RFC3576: Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS).
RFC3579: RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP).
RFC3580: IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines.
RFC3585: IPsec Configuration Policy Information Model.
RFC3586: IP Security Policy (IPSP) Requirements.
RFC3588: Diameter Base Protocol.
RFC3599: Request for Comments Summary RFC Numbers 3500-3599.
RFC3602: The AES-CBC Cipher Algorithm and Its Use with IPsec.
RFC3650: Handle System Overview.
RFC3686: Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP).
RFC3706: A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers.
RFC3715: IPsec-Network Address Translation (NAT) Compatibility Requirements.
RFC3720: Internet Small Computer Systems Interface (iSCSI).
RFC3723: Securing Block Storage Protocols over
RFC3740: The Multicast Group Security Architecture.
RFC3746: Forwarding and Control Element Separation (ForCES) Framework.
RFC3748: Extensible Authentication Protocol (EAP).
RFC3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys.
RFC3775: Mobility Support in IPv6.
RFC3776: Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents.
RFC3788: Security Considerations for Signaling Transport (SIGTRAN) Protocols.
RFC3792: Survey of IPv4 Addresses in Currently Deployed IETF Security Area Standards Track and Experimental Documents.
RFC3821: Fibre Channel Over TCP/IP (FCIP).
RFC3830: MIKEY: Multimedia Internet KEYing.
RFC3884: Use of IPsec Transport Mode for Dynamic Routing.
RFC3932: The IESG and RFC Editor Documents: Procedures.
RFC3945: Generalized Multi-Protocol Label Switching (GMPLS) Architecture.
RFC3947: Negotiation of NAT-Traversal in the
RFC3948: UDP Encapsulation of IPsec ESP Packets.
RFC3955: Evaluation of Candidate Protocols for IP Flow Information Export (IPFIX).
RFC3971: SEcure Neighbor Discovery (SEND).
RFC4023: Encapsulating MPLS in IP or Generic Routing Encapsulation (GRE).
RFC4046: Multicast Security (MSEC) Group Key Management Architecture.
RFC4066: Candidate Access Router Discovery (CARD).
RFC4067: Context Transfer Protocol (CXTP).
RFC4101: Writing Protocol Models.
RFC4106: The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP).
RFC4107: Guidelines for Cryptographic Key Management.
RFC4109: Algorithms for Internet Key Exchange version 1 (IKEv1).
RFC4110: A Framework for Layer 3 Provider-Provisioned Virtual Private Networks (PPVPNs).
RFC4171: Internet Storage Name Service (iSNS).
RFC4172: iFCP - A Protocol for Internet Fibre Channel Storage Networking.
RFC4196: The SEED Cipher Algorithm and Its Use with IPsec.
RFC4204: Link Management Protocol (LMP).
RFC4230: RSVP Security Properties.
RFC4250: The Secure Shell (SSH) Protocol Assigned Numbers.
RFC4253: The Secure Shell (SSH) Transport Layer Protocol.
RFC4301: Security Architecture for the Internet Protocol.
RFC4304: Extended Sequence Number (ESN) Addendum to IPsec Domain of Interpretation (DOI) for Internet Security Association and Key Management Protocol (ISAKMP).
RFC4305: Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH).
RFC4306: Internet Key Exchange (IKEv2) Protocol.
RFC4307: Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2).
RFC4308: Cryptographic Suites for IPsec.
RFC4309: Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP).
RFC4312: The Camellia Cipher Algorithm and Its Use With IPsec.
RFC4322: Opportunistic Encryption using the Internet Key Exchange (IKE).
RFC4347: Datagram Transport Layer Security.
RFC4430: Kerberized Internet Negotiation of Keys (KINK).
RFC4535: GSAKMP: Group Secure Association Key Management Protocol.
RFC4543: The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and
RFC4621: Design of the IKEv2 Mobility and Multihoming (MOBIKE) Protocol.
RFC4650: HMAC-Authenticated Diffie-Hellman for Multimedia Internet KEYing (MIKEY).
RFC4705: GigaBeam High-Speed Radio Link Encryption.