API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 4894
[ACTIVE]

Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec

Metadata

Publisher
IETF
Doc Type
Informational
Pages
11
Abstract
This document describes how the IKEv1 (Internet Key Exchange version 1), IKEv2, and IPsec protocols use hash functions, and explains the level of vulnerability of these protocols to the reduced collision resistance of the MD5 and SHA-1 hash algorithms. This memo provides information for the Internet community.
Publication Date
2007-05-01
Status Note
Informational
DOI
10.17487/RFC4894
Link
https://doi.org/10.17487/RFC4894
Author(s)
Paul E. Hoffman
Keyword(s)
MD5, PKIX
Latest version of IETF RFC 4894

Document Versions — IETF RFC 4894

  • ▶ IETF RFC 4894 (2007-05-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Bibliographic Reference(s)

  • Korver, B., "The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX", Work in Progress, April 2007. EXTERNAL
  • Bellovin, S. and E. Rescorla, "Deploying a New Hash Algorithm", NDSS '06, February 2006. EXTERNAL
  • Contini, S. and YL. Yin, "Forgery and Partial Key-Recovery Attacks on HMAC and NMAC Using Hash Collisions", Cryptology ePrint Report 2006/319, September 2006. EXTERNAL
  • Stevens, M., Lenstra, A., and B. de Weger, "Target Collisions for MD5 and Colliding X.509 Certificates for Different Identities", Cryptology ePrint Report 2006/360, October 2006. EXTERNAL
  • IETF RFC 2409 [Superseded*]
  • IETF RFC 3566 [Active*]
  • IETF RFC 3947 [Active*]
  • IETF RFC 4270 [Active*]
  • IETF RFC 4302 [Active*]
  • IETF RFC 4303 [Active*]
  • IETF RFC 4305 [Superseded*]
  • IETF RFC 4306 [Superseded*]
  • IETF RFC 4307 [Superseded*]
  • IETF RFC 4434 [Active*]
  • IETF RFC 4868 [Active*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4894.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 4894, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec. Available at https://doi.org/10.17487/RFC4894
Snippet:
IETF RFC 4894, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec. Available at https://doi.org/10.17487/RFC4894

HTML (ISO 690 compliant)

Preview:
IETF RFC 4894, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec. Available at https://doi.org/10.17487/RFC4894
Snippet:
<span class="citation"><cite>IETF RFC 4894</cite>, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec. Available at <a href="https://doi.org/10.17487/RFC4894" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4894</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 4894, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec
doi: 10.17487/RFC4894
url: https://doi.org/10.17487/RFC4894
Snippet:
<li>
<cite id="bib-rfc4894">IETF RFC 4894</cite>, Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec
<span class="doi">10.17487/RFC4894</span>
</li>

Referenced By