Understanding Public-Key Infrastructure: Concepts, Standards, and Deployment Considerations

IPsec

The upgrade of the Internet Protocol Version 6 (IPv6) included a set of new features and functions, one of which was due consideration, within the standards-track specifications, of the security architecture for this protocol [RFC2401]. A new IETF working group was created for the purpose of designing and standardizing the IP Security (IPsec) set of concepts and protocols. An important component of this architecture is a protocol for key exchange between IP nodes for the purpose of authenticity, integrity, and confidentiality. This work is embodied in the Internet Key Exchange (IKE) protocol [RFC2409] , a combination of a general framework for key management in this environment (Internet Security Association and Key Management Protocol, ...