SECUR Exam Cram™ 2 (Exam 642-501)

Introduction to IPSec

As mentioned earlier, IPSec is not a protocol unto itself, but rather is a framework for creating VPNs using various protocols and technologies. To perform key exchange, IPSec identifies the IKE protocol, which itself consists of various protocols, including the Internet Security Association and Key Management Protocol (ISAKMP), Secure Key Exchange Mechanism for Enternet (SKEME), and Oakley. For confidentiality, IPSec identifies various encryption algorithms, including Data Encryption Standard (DES), Triple DES (3DES), and Advanced Encryption Standard (AES). For integrity checks, IPSec identifies various hash algorithms, including Message Digest 5 (MD-5) and Secure Hash Algorithm 1 (SHA-1) as well as RSA for digital signatures. ...