Internet key exchange
|
|
Internet key exchange (IKE) is the protocol used to set up a security association in the IPsec protocol suite, which is in turn a mandatory part of the IETF IPv6 standard, which is being adopted (slowly) throughout the Internet. IPsec (and so IKE) is an optional part of the IPv4 standard. But in IPv6 providing security through IPsec is a must.
IKE is defined in RFC 2409. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, preshared secrets, are used to mutually authenticate the communicating parties.
IKE incoporates parts of the proposed Oakley protocol.
IKEv2 expands upon IKEv1 in to-be-published Internet Drafts.
- See also: Key-agreement protocol
External links
- IKE VPN server discovery and fingerprinting (http://www.nta-monitor.com/ike-scan/)