cryptography.pptx
- 1. INTERNET KEY EXCHANGE Presented by M.Vidhya I-M.Sc (CS) Nadar Saraswathi College of Arts and Science
- 2. What is Internet Key Exchange (IKE)? Internet Key Exchange (IKE) is a standard protocol used to set up a secure and authenticated communication channel between two parties via a virtual private network (VPN). The protocol ensures security for VPN negotiation, remote host and network access.
- 3. There are two versions of IKE standards: IKE protocol defined in RFC 2409 IKE version 2 (IKEv2) defined in RFC 7296
- 4. Most often, IKE uses X.509 public key infrastructure (PKI) certificates for authentication and a Diffie-Hellman key exchange protocol to establish a shared secret session. A hybrid protocol, IKE, also implements two earlier security protocols, Oakley and SKEME, within an Internet Security Association and Key Management Protocol (ISAKMP) TCP/IP-based framework.
- 6. How does IKE work in IPsec? IKE is a part of IPsec, a suite of protocols and algorithms used to secure sensitive data transmitted across a network. The Internet Engineering Task Force (IETF) developed IPsec to provide security through authentication and encryption of IP network packets and secure VPNs.
- 7. Understanding phase 1 and phase 2 of IKE The original version of IKE sets up secure communications channels in two phases: phase 1 and phase 2. In phase 1, an authenticated connection between the host and user is established using a preshared key or a digital certificate. The goal is to secure the communications that occur in phase 2. The Diffie-Hellman key exchange algorithm creates a secure authentication communication channel. This digital encryption method uses numbers raised to specific powers to produce decryption keys.
- 9. What are the potential challenges of using IKE? IKE may pose the following challenges: IKEv1 is vulnerable to Bleichenbacher attacks, which obtain information about a device based on the device's response to receiving a modified ciphertext. IOS and Cisco Systems still support IKEv1. Using IKEv2 in some operating systems (OS) may require users to make additional manual configurations. For example, if IKE in Junos OS is not explicitly configured, Junos OS defaults to version 1 of IKE.
- 10. Thank you