Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 21
- Abstract
- This specification describes the use of Hashed Message Authentication Mode (HMAC) in conjunction with the SHA-256, SHA-384, and SHA-512 algorithms in IPsec. These algorithms may be used as the basis for data origin authentication and integrity verification mechanisms for the Authentication Header (AH), Encapsulating Security Payload (ESP), Internet Key Exchange Protocol (IKE), and IKEv2 protocols, and also as Pseudo-Random Functions (PRFs) for IKE and IKEv2. Truncated output lengths are specified for the authentication-related variants, with the corresponding algorithms designated as HMAC-SHA-256-128, HMAC-SHA-384-192, and HMAC-SHA-512-256. The PRF variants are not truncated, and are called PRF-HMAC-SHA-256, PRF-HMAC-SHA-384, and PRF-HMAC-SHA-512. [STANDARDS-TRACK]
- Publication Date
- 2007-05-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC4868- Link
- https://doi.org/10.17487/RFC4868
- Author(s)
- Scott G. KellySheila Frankel
Latest version of IETF RFC 4868
Document Versions — IETF RFC 4868
-
▶ IETF RFC 4868 (2007-05-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- NIST FIPS 180-2 [Withdrawn]
- IETF RFC 2104 [Active, Amended*]
- IETF RFC 2404 [Active*]
- IETF RFC 2409 [Superseded*]
- IETF RFC 4231 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4302 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4306 [Superseded*]
- IETF RFC 4634 [Superseded*]
Bibliographic Reference(s)
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4868.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4868, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec. Available at https://doi.org/10.17487/RFC4868
Snippet:
IETF RFC 4868, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec. Available at https://doi.org/10.17487/RFC4868
HTML (ISO 690 compliant)
Preview:
IETF RFC 4868, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec. Available at https://doi.org/10.17487/RFC4868
Snippet:
<span class="citation"><cite>IETF RFC 4868</cite>, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec. Available at <a href="https://doi.org/10.17487/RFC4868" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4868</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4868, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec
doi: 10.17487/RFC4868
url: https://doi.org/10.17487/RFC4868
doi: 10.17487/RFC4868
url: https://doi.org/10.17487/RFC4868
Snippet:
<li> <cite id="bib-rfc4868">IETF RFC 4868</cite>, Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec <span class="doi">10.17487/RFC4868</span> </li>
Referenced By
- IETF RFC 7539 [Superseded*]