Internet Key Exchange Protocol Version 2 (IKEv2)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 142
Abstract: This document describes version 2 of the Internet Key Exchange (IKE) protocol. IKE is a component of IPsec used for performing mutual authentication and establishing and maintaining Security Associations (SAs). This document obsoletes RFC 5996, and includes all of the errata for it. It advances IKEv2 to be an Internet Standard.
Publication Date: 2014-10-01
Status Note: Internet Standard
DOI: 10.17487/RFC7296
Link: https://doi.org/10.17487/RFC7296
Author(s): Charlie Kaufman
Paul E. Hoffman
Yoav Nir
Pasi Eronen
Tero Kivinen
Keyword(s): IKE, IPSEC

Latest version of IETF RFC 7296

Document Versions — IETF RFC 7296

▶ IETF RFC 7296 (2014-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

RFC7427 NOT IN REGISTRY
RFC7670 NOT IN REGISTRY
RFC8247 NOT IN REGISTRY
RFC8983 NOT IN REGISTRY
RFC9370 NOT IN REGISTRY
RFC9827 NOT IN REGISTRY

Normative Reference(s)

IANA, "Internet Key Exchange Version 2 (IKEv2) Parameters", < http://www.iana.org/assignments/ikev2-parameters/ >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 2451 [Active*]
IETF RFC 3168 [Active*]
IETF RFC 3447 [Superseded*]
IETF RFC 3526 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 3948 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4291 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 4307 [Superseded*]
IETF RFC 4434 [Active*]
IETF RFC 4615 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5282 [Active*]

Bibliographic Reference(s)

ANSI.X3.106.1983 — 8 EXTERNAL
NIST FIPS 180-4 [Active]
NIST FIPS 186-4 [Active]
NIST SP 800-38A [Active, Amended]
Diffie, W. and M. Hellman, "New Directions in Cryptography", IEEE Transactions on Information Theory, V.IT-22 n. 6, June 1977. EXTERNAL
Kaufman, C., Perlman, R., and B. Sommerfeld, "DoS protection for UDP-based protocols", ACM Conference on Computer and Communications Security, October 2003. EXTERNAL
Perlman, R. and C. Kaufman, "Analysis of the IPsec key exchange Standard", WET-ICE Security Conference, MIT, 2001, < http://www.computer.org/csdl/proceedings/ wetice/2001/1269/00/12690150.pdf >. EXTERNAL
Asokan, N., Niemi, V., and K. Nyberg, "Man-in-the-Middle in Tunneled Authentication Protocols", November 2002, < http://eprint.iacr.org/2002/163 >. EXTERNAL
Aura, T., Roe, M., and A. Mohammed, "Experiences with Host-to-Host IPsec", 13th International Workshop on Security Protocols, Cambridge, UK, April 2005. EXTERNAL
Lai, X., "On the Design and Security of Block Ciphers", ETH Series in Information Processing, v. 1, Konstanz: Hartung-Gorre Verlag, 1992. EXTERNAL
Krawczyk, H., "SIGMA: the 'SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and its Use in the IKE Protocols", Advances in Cryptography - CRYPTO 2003 Proceedings LNCS 2729, 2003, < http://www.informatik.uni-trier.de/~ley/db/conf/crypto/ crypto2003.html >. EXTERNAL
Krawczyk, H., "SKEME: A Versatile Secure Key Exchange Mechanism for Internet", IEEE Proceedings of the 1996 Symposium on Network and Distributed Systems Security, 1996. EXTERNAL
IANA, "Extensible Authentication Protocol (EAP) Registry: Method Types", < http://http://www.iana.org/assignments/eap-eke/ >. EXTERNAL
Menezes, A. and B. Ustaoglu, "On Reusing Ephemeral Keys In Diffie-Hellman Key Agreement Protocols", December 2008, < http://www.cacr.math.uwaterloo.ca/techreports/2008/ cacr2008-24.pdf >. EXTERNAL
IETF RFC 791 [Active*]
IETF RFC 1321 [Active*]
IETF RFC 1958 [Active*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2367 [Active*]
IETF RFC 2401 [Superseded*]
IETF RFC 2407 [Superseded*]
IETF RFC 2408 [Superseded*]
IETF RFC 2409 [Superseded*]
IETF RFC 2412 [Active*]
IETF RFC 2474 [Active*]
IETF RFC 2475 [Active*]
IETF RFC 2522 [Active*]
IETF RFC 2775 [Active*]
IETF RFC 2983 [Active*]
IETF RFC 3173 [Active*]
IETF RFC 3439 [Active*]
IETF RFC 3715 [Active*]
IETF RFC 3810 [Superseded*]
IETF RFC 4086 [Active*]
IETF RFC 4282 [Superseded*]
IETF RFC 4302 [Active*]
IETF RFC 4303 [Active*]
IETF RFC 4306 [Superseded*]
IETF RFC 4478 [Active*]
IETF RFC 4555 [Active*]
IETF RFC 4718 [Superseded*]
IETF RFC 4945 [Active*]
IETF RFC 5322 [Active, Amended*]
IETF RFC 5739 [Active*]
IETF RFC 5857 [Active*]
IETF RFC 5890 [Active*]
IETF RFC 5996 [Superseded*]
IETF RFC 6275 [Active*]
IETF RFC 6532 [Active*]
IETF RFC 6989 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7296.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7296, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7296

Snippet:

IETF RFC 7296, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7296

HTML (ISO 690 compliant)

Preview:

IETF RFC 7296, Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7296

Snippet:

<span class="citation"><cite>IETF RFC 7296</cite>, Internet Key Exchange Protocol Version 2 (IKEv2). Available at <a href="https://doi.org/10.17487/RFC7296" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7296</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7296, Internet Key Exchange Protocol Version 2 (IKEv2)
doi: 10.17487/RFC7296
url: https://doi.org/10.17487/RFC7296

Snippet:

<li>
<cite id="bib-rfc7296">IETF RFC 7296</cite>, Internet Key Exchange Protocol Version 2 (IKEv2)
<span class="doi">10.17487/RFC7296</span>
</li>

Referenced By

IETF draft-ietf-emu-aka-pfs-05 [Active*]
IETF RFC 7539 [Superseded*]
IETF RFC 7619 [Active*]
IETF RFC 7696 [Active*]
IETF RFC 8085 [Active*]
IETF RFC 8439 [Active*]
IETF RFC 9048 [Active*]
IETF RFC 9678 [Active*]