Internet Key Exchange Protocol Version 2 (IKEv2)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 138
Abstract: This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and establishing and maintaining Security Associations (SAs). This document replaces and updates RFC 4306, and includes all of the clarifications from RFC 4718. [STANDARDS-TRACK]
Publication Date: 2010-09-01
Status Note: Proposed Standard
DOI: 10.17487/RFC5996
Link: https://doi.org/10.17487/RFC5996
Author(s): Charlie Kaufman
Paul E. Hoffman
Yoav Nir
Pasi Eronen
Keyword(s): IKE, IPSEC

Latest version of IETF RFC 5996

Document Versions — IETF RFC 5996

▶ IETF RFC 5996 (2010-09-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

IETF RFC 7296 [Active*]

Amended by:

RFC5998 NOT IN REGISTRY
IETF RFC 6989 [Active*]

Normative Reference(s)

"Internet Key Exchange Version 2 (IKEv2) Parameters", < http://www.iana.org >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 2451 [Active*]
IETF RFC 2616 [Superseded*]
IETF RFC 3168 [Active*]
IETF RFC 3447 [Superseded*]
IETF RFC 3526 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 3948 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4291 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 4307 [Superseded*]
IETF RFC 4434 [Active*]
IETF RFC 4615 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5282 [Active*]

Bibliographic Reference(s)

ANSI.X3.106.1983 — 8 EXTERNAL
NIST FIPS 180-3 [Withdrawn]
NIST FIPS 186-3 [Withdrawn]
NIST SP 800-38A [Active, Amended]
Diffie, W. and M. Hellman, "New Directions in Cryptography", IEEE Transactions on Information Theory, V.IT-22 n. 6, June 1977. EXTERNAL
R. Perlman and C. Kaufman, "Analysis of the IPsec key exchange Standard", WET-ICE Security Conference, MIT, 2001, < http://sec.femto.org/wetice-2001/papers/radia-paper.pdf >. EXTERNAL
X. Lai, "On the Design and Security of Block Ciphers", ETH Series in Information Processing, v. 1, Konstanz: Hartung- Gorre Verlag, 1992. EXTERNAL
N. Asokan, V. Nierni, and K. Nyberg, "Man-in-the-Middle in Tunneled Authentication Protocols", November 2002, < http://eprint.iacr.org/2002/163 >. EXTERNAL
H. Krawczyk, "SIGMA: the `SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and its Use in the IKE Protocols", Advances in Cryptography - CRYPTO 2003 Proceedings LNCS 2729, 2003, < http:// www.informatik.uni-trier.de/~ley/db/conf/crypto/ crypto2003.html >. EXTERNAL
R. Rivest, A. Shamir, and L. Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", February 1978. EXTERNAL
"Extensible Authentication Protocol (EAP) Registry: Method Types", < http://www.iana.org >. EXTERNAL
C. Kaufman, R. Perlman, and B. Sommerfeld, "DoS protection for UDP-based protocols", ACM Conference on Computer and Communications Security, October 2003. EXTERNAL
Aura, T., Roe, M., and A. Mohammed, "Experiences with Host-to-Host IPsec", 13th International Workshop on Security Protocols, Cambridge, UK, April 2005. EXTERNAL
H. Krawczyk, "SKEME: A Versatile Secure Key Exchange Mechanism for Internet", IEEE Proceedings of the 1996 Symposium on Network and Distributed Systems Security , 1996. EXTERNAL
Menezes, A. and B. Ustaoglu, "On Reusing Ephemeral Keys In Diffie-Hellman Key Agreement Protocols", December 2008, < http://www.cacr.math.uwaterloo.ca/techreports/2008/ cacr2008-24.pdf >. EXTERNAL
IETF RFC 791 [Active*]
IETF RFC 1321 [Active*]
IETF RFC 1958 [Active*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2367 [Active*]
IETF RFC 2401 [Superseded*]
IETF RFC 2407 [Superseded*]
IETF RFC 2408 [Superseded*]
IETF RFC 2409 [Superseded*]
IETF RFC 2412 [Active*]
IETF RFC 2474 [Active*]
IETF RFC 2475 [Active*]
IETF RFC 2522 [Active*]
IETF RFC 2775 [Active*]
IETF RFC 2983 [Active*]
IETF RFC 3173 [Active*]
IETF RFC 3439 [Active*]
IETF RFC 3715 [Active*]
IETF RFC 3775 [Superseded*]
IETF RFC 3810 [Superseded*]
IETF RFC 4086 [Active*]
IETF RFC 4282 [Superseded*]
IETF RFC 4302 [Active*]
IETF RFC 4303 [Active*]
IETF RFC 4306 [Superseded*]
IETF RFC 4478 [Active*]
IETF RFC 4555 [Active*]
IETF RFC 4718 [Superseded*]
IETF RFC 5322 [Active, Amended*]
IETF RFC 5335 [Superseded*]
IETF RFC 5739 [Active*]
IETF RFC 5857 [Active*]
IETF RFC 5890 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5996.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 5996, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC5996

Snippet:

IETF RFC 5996, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC5996

HTML (ISO 690 compliant)

Preview:

IETF RFC 5996, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC5996

Snippet:

<span class="citation"><cite>IETF RFC 5996</cite>, Internet Key Exchange Protocol Version 2 (IKEv2). Available at <a href="https://doi.org/10.17487/RFC5996" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5996</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 5996, Internet Key Exchange Protocol Version 2 (IKEv2)
doi: 10.17487/RFC5996
url: https://doi.org/10.17487/RFC5996

Snippet:

<li>
<cite id="bib-rfc5996">IETF RFC 5996</cite>, Internet Key Exchange Protocol Version 2 (IKEv2)
<span class="doi">10.17487/RFC5996</span>
</li>

Referenced By

IETF RFC 6040 [Active*]
IETF RFC 6090 [Active*]
IETF RFC 6124 [Active*]
IETF RFC 6269 [Active*]
IETF RFC 6275 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 6709 [Active*]
IETF RFC 6989 [Active*]
IETF RFC 7296 [Active*]