Internet Key Exchange (IKEv2) Protocol
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 99
- Abstract
- This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and establishing and maintaining security associations (SAs). This version of the IKE specification combines the contents of what were previously separate documents, including Internet Security Association and Key Management Protocol (ISAKMP, RFC 2408), IKE (RFC 2409), the Internet Domain of Interpretation (DOI, RFC 2407), Network Address Translation (NAT) Traversal, Legacy authentication, and remote address acquisition. Version 2 of IKE does not interoperate with version 1, but it has enough of the header format in common that both versions can unambiguously run over the same UDP port. [STANDARDS-TRACK]
- Publication Date
- 2005-12-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC4306- Link
- https://doi.org/10.17487/RFC4306
- Author(s)
- Charlie Kaufman
- Keyword(s)
- IPSEC, Cryptography, Authentication, IKE, Oakley, ISAKMP
Latest version of IETF RFC 4306
Document Versions — IETF RFC 4306
-
▶ IETF RFC 4306 (2005-12-01)THIS DOC [SUPERSEDED] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2434 [Superseded*]
- IETF RFC 2451 [Active*]
- IETF RFC 3168 [Active*]
- IETF RFC 3280 [Superseded*]
- IETF RFC 3513 [Superseded*]
- IETF RFC 3526 [Active*]
- IETF RFC 3748 [Active*]
- IETF RFC 3948 [Active*]
- IETF RFC 4301 [Active, Amended*]
Bibliographic Reference(s)
- ANSI.X3.106.1983 — 8 EXTERNAL
- NIST FIPS 180-1 [Withdrawn]
- NIST.FIPS.186 — DSS EXTERNAL
- Krawczyk, H., "SKEME: A Versatile Secure Key Exchange Mechanism for Internet", from IEEE Proceedings of the 1996 Symposium on Network and Distributed Systems Security. EXTERNAL
- Lai, X., "On the Design and Security of Block Ciphers," ETH Series in Information Processing, v. 1, Konstanz: Hartung-Gorre Verlag, 1992. EXTERNAL
- Rivest, R., Shamir, A., and Adleman, L., "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", Communications of the ACM, v. 21, n. 2, February 1978. EXTERNAL
- Asokan, N., Nierni, V., and Nyberg, K., "Man-in-the-Middle in Tunneled Authentication Protocols", http://eprint.iacr.org/2002/163 , November 2002. EXTERNAL
- Perlman, R., and Kaufman, C., "Analysis of the IPsec key exchange Standard", WET-ICE Security Conference, MIT,2001, http://sec.femto.org/wetice-2001/papers/radia-paper.pdf . EXTERNAL
- Krawczyk, H., "SIGMA: the `SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and its Use in the IKE Protocols", in Advances in Cryptography - CRYPTO 2003 Proceedings, LNCS 2729, Springer, 2003. Available at: http://www.informatik.uni-trier.de/~ley/db/conf/ crypto/crypto2003.html . EXTERNAL
- Kaufman, C., Perlman, R., and Sommerfeld, B., "DoS protection for UDP-based protocols", ACM Conference on Computer and Communications Security, October 2003. EXTERNAL
- Diffie, W., and Hellman M., "New Directions in Cryptography", IEEE Transactions on Information Theory, V. IT-22, n. 6, June 1977. EXTERNAL
- IETF RFC 1321 [Active*]
- IETF RFC 1958 [Active*]
- IETF RFC 2104 [Active, Amended*]
- IETF RFC 2131 [Active*]
- IETF RFC 2251 [Superseded*]
- IETF RFC 2367 [Active*]
- IETF RFC 2401 [Superseded*]
- IETF RFC 2407 [Superseded*]
- IETF RFC 2408 [Superseded*]
- IETF RFC 2409 [Superseded*]
- IETF RFC 2412 [Active*]
- IETF RFC 2474 [Active*]
- IETF RFC 2475 [Active*]
- IETF RFC 2522 [Active*]
- IETF RFC 2775 [Active*]
- IETF RFC 2865 [Active*]
- IETF RFC 2983 [Active*]
- IETF RFC 3173 [Active*]
- IETF RFC 3439 [Active*]
- IETF RFC 3447 [Superseded*]
- IETF RFC 3715 [Active*]
- IETF RFC 4086 [Active*]
- IETF RFC 4302 [Active*]
- IETF RFC 4303 [Active*]
- T-REC-X.501.1993 — X.501 EXTERNAL
- ITU-T X.509 [Superseded]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4306.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4306, Internet Key Exchange (IKEv2) Protocol. Available at https://doi.org/10.17487/RFC4306
Snippet:
IETF RFC 4306, Internet Key Exchange (IKEv2) Protocol. Available at https://doi.org/10.17487/RFC4306
HTML (ISO 690 compliant)
Preview:
IETF RFC 4306, Internet Key Exchange (IKEv2) Protocol. Available at https://doi.org/10.17487/RFC4306
Snippet:
<span class="citation"><cite>IETF RFC 4306</cite>, Internet Key Exchange (IKEv2) Protocol. Available at <a href="https://doi.org/10.17487/RFC4306" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4306</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4306, Internet Key Exchange (IKEv2) Protocol
doi: 10.17487/RFC4306
url: https://doi.org/10.17487/RFC4306
doi: 10.17487/RFC4306
url: https://doi.org/10.17487/RFC4306
Snippet:
<li> <cite id="bib-rfc4306">IETF RFC 4306</cite>, Internet Key Exchange (IKEv2) Protocol <span class="doi">10.17487/RFC4306</span> </li>
Referenced By
- IETF RFC 4285 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4302 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4305 [Superseded*]
- IETF RFC 4307 [Superseded*]
- IETF RFC 4309 [Active*]
- IETF RFC 4347 [Superseded*]
- IETF RFC 4434 [Active*]
- IETF RFC 4478 [Active*]
- IETF RFC 4535 [Active*]
- IETF RFC 4540 [Active*]
- IETF RFC 4555 [Active*]
- IETF RFC 4568 [Active*]
- IETF RFC 4595 [Active*]
- IETF RFC 4601 [Superseded*]
- IETF RFC 4615 [Active*]
- IETF RFC 4718 [Superseded*]
- IETF RFC 4753 [Superseded*]
- IETF RFC 4754 [Active*]
- IETF RFC 4868 [Active*]
- IETF RFC 4945 [Active*]
- IETF RFC 4949 [Active*]
- IETF RFC 4960 [Superseded*]
- IETF RFC 4962 [Active*]
- IETF RFC 5106 [Active*]
- IETF RFC 5114 [Active*]
- IETF RFC 5191 [Active*]
- IETF RFC 5193 [Active*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 5247 [Active*]
- IETF RFC 5282 [Active*]
- IETF RFC 5295 [Active*]
- IETF RFC 5405 [Superseded*]
- IETF RFC 5406 [Active*]
- IETF RFC 5448 [Active*]
- IETF RFC 5580 [Active*]
- IETF RFC 5739 [Active*]
- IETF RFC 5857 [Active*]
- IETF RFC 5869 [Active*]
- IETF RFC 5903 [Active*]
- IETF RFC 5996 [Superseded*]
- IETF RFC 6090 [Active*]
- IETF RFC 7296 [Active*]
- IETF RFC 9048 [Active*]