Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 29
Abstract: This document describes how to extend the Internet Key Exchange Protocol Version 2 (IKEv2) to allow multiple key exchanges to take place while computing a shared secret during a Security Association (SA) setup. This document utilizes the IKE_INTERMEDIATE exchange, where multiple key exchanges are performed when an IKE SA is being established. It also introduces a new IKEv2 exchange, IKE_FOLLOWUP_KE, which is used for the same purpose when the IKE SA is being rekeyed or is creating additional Child SAs. This document updates RFC 7296 by renaming a Transform Type 4 from "Diffie-Hellman Group (D-H)" to "Key Exchange Method (KE)" and renaming a field in the Key Exchange Payload from "Diffie-Hellman Group Num" to "Key Exchange Method". It also renames an IANA registry for this Transform Type from "Transform Type 4 - Diffie- Hellman Group Transform IDs" to "Transform Type 4 - Key Exchange Method Transform IDs". These changes generalize key exchange algorithms that can be used in IKEv2.
Publication Date: 2023-05-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9370
Link: https://doi.org/10.17487/RFC9370
Author(s): C. Tjhai
M. Tomlinson
G. Bartlett
Scott Fluhrer
Daniel Van Geest
Oscar Garcia-Morchon
Valery Smyslov
Keyword(s): Post-quantum Cryptography, Hybrid, Hybrid Key Exchange, KEM, Quantum, PQ

Latest version of IETF RFC 9370

Document Versions — IETF RFC 9370

▶ IETF RFC 9370 (2023-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 7296 [Active*]
IETF RFC 8174 [Active*]
RFC9242 — RFC9242 EXTERNAL

Bibliographic Reference(s)

10.48550-arXiv.quant-ph-9605043 — GROVER EXTERNAL
IETF.draft-ietf-ipsecme-g-ikev2-09 — I-D.ietf-ipsecme-g-ikev2 EXTERNAL
IETF.draft-tjhai-ikev2-beyond-64k-limit-03 — I-D.tjhai-ikev2-beyond-64k-limit EXTERNAL
NIST, "Post-Quantum Cryptography Standard", January 2023, <https://csrc.nist.gov/Projects/post-quantum-cryptography/faqs>. EXTERNAL
IANA, "Internet Key Exchange Version 2 (IKEv2) Parameters: Transform Type 4 - Diffie-Hellman Group Transform IDs", <https://www.iana.org/assignments/ikev2-parameters/>. EXTERNAL
RFC5723 — RFC5723 EXTERNAL
RFC6023 — RFC6023 EXTERNAL
RFC7383 — RFC7383 EXTERNAL
RFC8019 — RFC8019 EXTERNAL
IETF RFC 8247 [Active*]
RFC8784 — RFC8784 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9370.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9370, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9370

Snippet:

IETF RFC 9370, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9370

HTML (ISO 690 compliant)

Preview:

IETF RFC 9370, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9370

Snippet:

<span class="citation"><cite>IETF RFC 9370</cite>, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2). Available at <a href="https://doi.org/10.17487/RFC9370" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9370</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9370, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)
doi: 10.17487/RFC9370
url: https://doi.org/10.17487/RFC9370

Snippet:

<li>
<cite id="bib-rfc9370">IETF RFC 9370</cite>, Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)
<span class="doi">10.17487/RFC9370</span>
</li>

Referenced By

IETF RFC 9838 [Active*]