RFC9370 · Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)

{
  "id": "RFC9370",
  "number": 9370,
  "title_en": "Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes how to extend the Internet Key Exchange Protocol Version 2 (IKEv2) to allow multiple key exchanges to take place while computing a shared secret during a Security Association (SA) setup. This document utilizes the IKE_INTERMEDIATE exchange, where multiple key exchanges are performed when an IKE SA is being established. It also introduces a new IKEv2 exchange, IKE_FOLLOWUP_KE, which is used for the same purpose when the IKE SA is being rekeyed or is creating additional Child SAs. This document updates RFC 7296 by renaming a Transform Type 4 from \"Diffie-Hellman Group (D-H)\" to \"Key Exchange Method (KE)\" and renaming a field in the Key Exchange Payload from \"Diffie-Hellman Group Num\" to \"Key Exchange Method\". It also renames an IANA registry for this Transform Type from \"Transform Type 4 - Diffie- Hellman Group Transform IDs\" to \"Transform Type 4 - Key Exchange Method Transform IDs\". These changes generalize key exchange algorithms that can be used in IKEv2.",
  "authors": [
    "CJ. Tjhai",
    "M. Tomlinson",
    "G. Bartlett",
    "S. Fluhrer",
    "D. Van Geest",
    "O. Garcia-Morchon",
    "V. Smyslov"
  ],
  "organizations": [],
  "publication_date": "2023-05-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "ipsecme",
  "source_draft": "draft-ietf-ipsecme-ikev2-multiple-ke-12",
  "page_count": 29,
  "doi": "10.17487/RFC9370",
  "keywords": [
    "post-quantum",
    "PQC",
    "hybrid",
    "hybridization",
    "hybrid key exchange",
    "key encapsulation",
    "quantum",
    "quantum-safe",
    "KEM",
    "PQ"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC7296"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9370/",
    "html": "https://www.rfc-editor.org/rfc/rfc9370.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9370.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9370/"
  }
}