RFC 7427

Signature Authentication in the Internet Key Exchange Version 2 (IKEv2), January 2015

Canonical URL:
https://www.rfc-editor.org/rfc/rfc7427.txt
File formats:
Plain TextPDF
Status:
PROPOSED STANDARD
Updates:
RFC 7296
Authors:
T. Kivinen
J. Snyder
Stream:
IETF
Source:
ipsecme (sec)

Cite this RFC: TXT  |  XML

DOI:  10.17487/RFC7427

Discuss this RFC: Send questions or comments to ipsec@ietf.org

Other actions: View Errata  |  Submit Errata  |  Find IPR Disclosures from the IETF


Abstract

The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 4844.


Download PDF Reader