Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 66
Abstract: This document presents an extension to the Internet Key Exchange Protocol Version 2 (IKEv2) for the purpose of group key management. The protocol is in conformance with the Multicast Security (MSEC) Group Key Management architecture, which contains two components: member registration and group rekeying. Both components are required for a Group Controller/Key Server (GCKS) to provide authorized Group Members (GMs) with IPsec Group Security Associations (GSAs). The GMs then exchange IP multicast or other group traffic as IPsec packets. This document obsoletes RFC 6407.
Publication Date: 2025-11-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9838
Link: https://doi.org/10.17487/RFC9838
Author(s): Valery Smyslov
Brian Weis

Latest version of IETF RFC 9838

Document Versions — IETF RFC 9838

▶ IETF RFC 9838 (2025-11-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 4302 [Active*]
IETF RFC 4303 [Active*]
IETF RFC 5280 [Active, Amended*]
RFC6054 — RFC6054 EXTERNAL
IETF RFC 7296 [Active*]
IETF RFC 7427 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 9827 [Active*]

Bibliographic Reference(s)

10.1007-3-540-44647-8_3 — NNL EXTERNAL
10.1109-TSE.2003.1199073 — OFT EXTERNAL
IETF.draft-yeung-g-ikev2-07 — I-D.yeung-g-ikev2 EXTERNAL
Shinichi, S., "ARX-KW, a family of key wrapping constructions using SipHash and ChaCha", Cryptology ePrint Archive, Paper 2020/059, January 2020, <https://eprint.iacr.org/2020/059.pdf>. EXTERNAL
IANA, "Internet Key Exchange Version 2 (IKEv2) Parameters", <http://www.iana.org/assignments/ikev2-parameters>. EXTERNAL
IETF RFC 2409 [Superseded*]
IETF RFC 2627 [Active*]
IETF RFC 3686 [Active*]
IETF RFC 3740 [Active*]
IETF RFC 3948 [Active*]
RFC4046 — RFC4046 EXTERNAL
IETF RFC 4106 [Active*]
IETF RFC 4309 [Active*]
RFC4543 — RFC4543 EXTERNAL
RFC5374 — RFC5374 EXTERNAL
RFC5649 — AES-KEY-WRAP EXTERNAL
RFC5685 — RFC5685 EXTERNAL
RFC5723 — RFC5723 EXTERNAL
IETF RFC 5998 [Active*]
IETF RFC 6407 [Superseded*]
RFC6467 — RFC6467 EXTERNAL
RFC7383 — RFC7383 EXTERNAL
RFC7634 — RFC7634 EXTERNAL
RFC8052 — RFC8052 EXTERNAL
RFC8263 — RFC8263 EXTERNAL
RFC8750 — RFC8750 EXTERNAL
RFC8784 — RFC8784 EXTERNAL
RFC9242 — RFC9242 EXTERNAL
RFC9329 — RFC9329 EXTERNAL
RFC9347 — RFC9347 EXTERNAL
IETF RFC 9370 [Active*]
RFC9867 — RFC9867 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9838.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9838, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9838

Snippet:

IETF RFC 9838, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9838

HTML (ISO 690 compliant)

Preview:

IETF RFC 9838, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2). Available at https://doi.org/10.17487/RFC9838

Snippet:

<span class="citation"><cite>IETF RFC 9838</cite>, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2). Available at <a href="https://doi.org/10.17487/RFC9838" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9838</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9838, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
doi: 10.17487/RFC9838
url: https://doi.org/10.17487/RFC9838

Snippet:

<li>
<cite id="bib-rfc9838">IETF RFC 9838</cite>, Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
<span class="doi">10.17487/RFC9838</span>
</li>

Referenced By

IETF RFC 9827 [Active*]