API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7427
[ACTIVE]

Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

Metadata

Publisher
IETF
Doc Type
Standard
Pages
18
Abstract
The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.
Publication Date
2015-01-01
Status Note
Proposed Standard
DOI
10.17487/RFC7427
Link
https://doi.org/10.17487/RFC7427
Author(s)
Tero Kivinen
Joel Snyder
Keyword(s)
IPSEC, IKE, IKEv2, Signature, Authentication, RSA, DSS, DSA, ECDSA, RSASSA-PSS, PKIX
Latest version of IETF RFC 7427

Document Versions — IETF RFC 7427

  • ▶ IETF RFC 7427 (2015-01-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • ANSI.X9.62 — X9.62 EXTERNAL
  • NIST.SP.800-57 — NIST.SP800-57 EXTERNAL
  • Wang, X. and H. Yu, "How to break MD5 and other hash functions", Proceedings of EuroCrypt 2005, Lecture Notes in Computer Science Vol. 3494, 2005. EXTERNAL
  • Menezes, A., "Evaluation of Security Level of Cryptography: RSA-OAEP, RSA-PSS, RSA Signature", December 2001. EXTERNAL
  • Kuehn, U., Pyshkin, A., Tews, E., and R. Weinmann, "Variants of Bleichenbacher's Low-Exponent Attack on PKCS#1 RSA Signatures", Proceedings of Sicherheit 2008, pp.97-109, 2008. EXTERNAL
  • IETF RFC 3279 [Active*]
  • IETF RFC 3447 [Superseded*]
  • IETF RFC 4055 [Active, Amended*]
  • IETF RFC 4301 [Active, Amended*]
  • IETF RFC 5226 [Superseded*]
  • IETF RFC 5480 [Active*]
  • IETF RFC 5758 [Active*]
  • IETF RFC 5912 [Active*]
  • T-REC-X.690.2002 — 12 EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7427.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7427, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7427
Snippet:
IETF RFC 7427, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7427

HTML (ISO 690 compliant)

Preview:
IETF RFC 7427, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC7427
Snippet:
<span class="citation"><cite>IETF RFC 7427</cite>, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2). Available at <a href="https://doi.org/10.17487/RFC7427" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7427</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7427, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
doi: 10.17487/RFC7427
url: https://doi.org/10.17487/RFC7427
Snippet:
<li>
<cite id="bib-rfc7427">IETF RFC 7427</cite>, Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
<span class="doi">10.17487/RFC7427</span>
</li>

Referenced By