Deprecation of the Internet Key Exchange Version 1 Protocol and Obsoleted Algorithms
RFC 9395, “Deprecation of the Internet Key Exchange Version 1 Protocol and Obsoleted Algorithms”, is a Proposed Standard document published in April 2023 by P. Wouters. It updates RFC 8221, RFC 8247. The canonical text is published by the RFC Editor.
Abstract
Internet Key Exchange Version 1 (IKEv1) has been deprecated, and RFCs 2407, 2408, and 2409 have been moved to Historic status. This document updates RFCs 8221 and 8247 to reflect the usage guidelines of old algorithms that are associated with IKEv1 and are not specified or commonly implemented for IKEv2. This document further updates the IANA registries for IKEv2 "Transform Type Values" by adding a "Status" column where the deprecation status can be listed.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9395 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9394 IMAP PARTIAL Extension for Paged SEARCH and FETCH
- RFC 9396 OAuth 2.0 Rich Authorization Requests
- RFC 9393 Concise Software Identification Tags
- RFC 9397 Trusted Execution Environment Provisioning Architecture
- RFC 9392 Sending RTP Control Protocol Feedback for Congestion Control in Interactive Multimedia Conferences
- RFC 9398 A YANG Data Model for Internet Group Management Protocol and Multicast Listener Discovery Proxy Devices
- RFC 9391 Static Context Header Compression over Narrowband Internet of Things
- RFC 9399 Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates