Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 Protocol
RFC 5282, “Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 Protocol”, is a Proposed Standard document published in August 2008 by D. Black, D. McGrew. It updates RFC 4306. The canonical text is published by the RFC Editor.
Abstract
An authenticated encryption algorithm combines encryption and integrity into a single operation; such algorithms may also be referred to as combined modes of an encryption cipher or as combined mode algorithms. This document describes the use of authenticated encryption algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) protocol.
The use of two specific authenticated encryption algorithms with the IKEv2 Encrypted Payload is also described; these two algorithms are the Advanced Encryption Standard (AES) in Galois/Counter Mode (AES GCM) and AES in Counter with CBC-MAC Mode (AES CCM). Additional documents may describe the use of other authenticated encryption algorithms with the IKEv2 Encrypted Payload. [STANDARDS-TRACK]
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 5282 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 5281 Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0
- RFC 5283 LDP Extension for Inter-Area Label Switched Paths
- RFC 5280 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List Profile
- RFC 5284 User-Defined Errors for RSVP
- RFC 5279 A Uniform Resource Name Namespace for the 3rd Generation Partnership Project
- RFC 5285 A General Mechanism for RTP Header Extensions
- RFC 5278 IANA Registration of Enumservices for Voice and Video Messaging
- RFC 5286 Basic Specification for IP Fast Reroute: Loop-Free Alternates