SK_a (authentication): computed for each direction (one for outbound and one for inbound) to hash (using HMAC) IKE_AUTH messages.SK_e (encryption): computed for each direction (one for outbound and one for inbound) to encrypt IKE_AUTH messages.Also creates a seed key (known as SKEYSEED) where further keys are produced:.IKE_SA_INIT: negotiate security parameters to protect the next 2 messages (IKE_AUTH).Understanding IPSec IKEv1 negotiation on Wireshark 1 The Big Picture
0 Comments
Leave a Reply. |