URL: http://www.ietf.org/rfc/rfc2408.txt
This
memo describes a protocol utilizing security concepts necessary for establishing
Security Associations (SA) and cryptographic keys in an Internet environment. A
Security Association protocol that negotiates, establishes, modifies
and deletes Security Associations and their attributes is required for an
evolving Internet, where there will be numerous security mechanisms and several
options for each security mechanism. The key management protocol must be robust
in order to handle public key generation for the Internet community at large
and private key requirements for those private networks with that requirement.
The Internet Security Association and Key Management Protocol (ISAKMP) defines
the procedures for authenticating a communicating peer, creation
and management of Security Associations, key generation techniques, and threat
mitigation (e.g. denial of service and replay attacks). All of these are
necessary to establish and maintain secure communications (via IP Security
Service or any other security protocol) in an Internet environment.
Keywords:
|