API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7321
[SUPERSEDED]

Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)

Metadata

Publisher
IETF
Doc Type
Standard
Pages
11
Abstract
This document updates the Cryptographic Algorithm Implementation Requirements for the Encapsulating Security Payload (ESP) and Authentication Header (AH). It also adds usage guidance to help in the selection of these algorithms. ESP and AH protocols make use of various cryptographic algorithms to provide confidentiality and/or data origin authentication to protected data communications in the IP Security (IPsec) architecture. To ensure interoperability between disparate implementations, the IPsec standard specifies a set of mandatory-to- implement algorithms. This document specifies the current set of mandatory-to-implement algorithms for ESP and AH, specifies algorithms that should be implemented because they may be promoted to mandatory at some future time, and also recommends against the implementation of some obsolete algorithms. Usage guidance is also provided to help the user of ESP and AH best achieve their security goals through appropriate choices of cryptographic algorithms.
Publication Date
2014-08-01
Status Note
Proposed Standard
DOI
10.17487/RFC7321
Link
https://doi.org/10.17487/RFC7321
Author(s)
David McGrew
Paul E. Hoffman
Latest version of IETF RFC 7321

Document Versions — IETF RFC 7321

  • ▶ IETF RFC 7321 (2014-08-01)
    THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

Normative Reference(s)

Bibliographic Reference(s)

  • McGrew, D., "Impossible plaintext cryptanalysis and probable-plaintext collision attacks of 64-bit block cipher modes", IACR ePrint, 2012. EXTERNAL
  • Degabriele, J. and K. Paterson, "Attacking the IPsec Standards in Encryption-only Configurations", IEEE Symposium on Privacy and Security, 2007. EXTERNAL
  • Vaudenay, S., "Security Flaws Induced by CBC Padding - Applications to SSL, IPSEC, WTLS ...", EUROCRYPT, 2002. EXTERNAL
  • Kounavis, M., Kang, X., Grewal, K., Eszenyi, M., Gueron, S., and D. Durham, "Encrypting the Internet", SIGCOMM, 2010. EXTERNAL
  • Paterson, K. and J. Degabriele, "On the (in)security of IPsec in MAC-then-encrypt configurations", CCS '10, ACM Conference on Computer and Communications Security, 2010. EXTERNAL
  • Bellovin, S., "Problem areas for the IP security protocols", Proceedings of the Sixth Usenix Unix Security Symposium, 1996. EXTERNAL
  • Hoban, A., "Using Intel AES New Instructions and PCLMULQDQ to Significantly Improve IPSec Performance on Linux", Intel White Paper, August 2010. EXTERNAL
  • IETF RFC 2404 [Active*]
  • IETF RFC 2405 [Active*]
  • IETF RFC 2410 [Active*]
  • IETF RFC 2451 [Active*]
  • IETF RFC 3566 [Active*]
  • IETF RFC 3602 [Active*]
  • IETF RFC 3686 [Active*]
  • IETF RFC 4106 [Active*]
  • IETF RFC 4309 [Active*]
  • RFC4543 — RFC4543 EXTERNAL
  • IETF RFC 4835 [Superseded*]
  • IETF RFC 4949 [Active*]
  • IETF RFC 5116 [Active*]
  • IETF RFC 6151 [Active*]
  • RFC6379 — RFC6379 EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7321.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7321, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH). Available at https://doi.org/10.17487/RFC7321
Snippet:
IETF RFC 7321, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH). Available at https://doi.org/10.17487/RFC7321

HTML (ISO 690 compliant)

Preview:
IETF RFC 7321, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH). Available at https://doi.org/10.17487/RFC7321
Snippet:
<span class="citation"><cite>IETF RFC 7321</cite>, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH). Available at <a href="https://doi.org/10.17487/RFC7321" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7321</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7321, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
doi: 10.17487/RFC7321
url: https://doi.org/10.17487/RFC7321
Snippet:
<li>
<cite id="bib-rfc7321">IETF RFC 7321</cite>, Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
<span class="doi">10.17487/RFC7321</span>
</li>

Referenced By