Don't like IKE?

    Date10 Dec 2001
    CategoryCryptography
    3077
    Posted ByAnthony Pell
    The Internet Engineering Task Force this week will consider replacing the protocol that manages encryption keys for IP Security VPNs with a new set of rules that is admittedly less flexible but could lead to equipment that is more interoperable, supports better security and is easier to configure.. . . The Internet Engineering Task Force this week will consider replacing the protocol that manages encryption keys for IP Security VPNs with a new set of rules that is admittedly less flexible but could lead to equipment that is more interoperable, supports better security and is easier to configure.

    At issue is Internet Key Exchange (IKE), the key management protocol used in IPSec VPNs that experts say is so complicated that it stands in the way of interoperability. And the chatty method IKE uses to initiate security sessions theoretically leaves VPN devices open to denial-of-service (DoS) attacks.

    To address these shortcomings, some of the IETF's most influential participants have stepped forward with three proposals to replace IKE: IKEv2, Just Fast Keying (JFK) and Sigma. Each eliminates certain features included in IKE, meaning the resulting protocols are more rigid. This rigidity also means there will be fewer parameters for users to configure when the IKE replacement is integrated in VPN devices, making it easier to set up a VPN, experts say.

    You are not authorised to post comments.

    LinuxSecurity Poll

    Do you reuse passwords across multiple accounts?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /component/communitypolls/?task=poll.vote
    13
    radio
    [{"id":"55","title":"Yes","votes":"5","type":"x","order":"1","pct":45.45,"resources":[]},{"id":"56","title":"No","votes":"6","type":"x","order":"2","pct":54.55,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.