⌕ Поиск по атласу

IETF · RFC · RFC7427

RFC7427 · Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.

Официальная английская аннотация

The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.

Связи документа

updates: RFC7296

Официальный источник · 2015-01-01

Полные импортированные сведения карточки
{
  "id": "RFC7427",
  "number": 7427,
  "title_en": "Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.",
  "authors": [
    "T. Kivinen",
    "J. Snyder"
  ],
  "organizations": [],
  "publication_date": "2015-01-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "ipsecme",
  "source_draft": "draft-kivinen-ipsecme-signature-auth-07",
  "page_count": 18,
  "doi": "10.17487/RFC7427",
  "keywords": [
    "IPsec",
    "IKE",
    "IKEv2",
    "Signature",
    "Authentication",
    "RSA",
    "DSS",
    "DSA",
    "ECDSA",
    "SASSA-PSS",
    "PKIX"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC7296"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc7427/",
    "html": "https://www.rfc-editor.org/rfc/rfc7427.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc7427.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7427/"
  }
}