[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Different Encryption Algorithms for Sned and Receive using I



On 15 Feb 99 at 18:08, Hiroki Ishibashi wrote:

> I have a simple question that I want to clarify.
> Using SAs negotiated by IKE phase2, is it possible to use
> different encryption algorithms for sending and receiving data?

No. IKE can't negotiate different security attributes 
(except SPIs, of course) for different directions.

> By reading ISAKMP and IKE RFCs, encryption algorithms for 
> both directions become the same.  It this True?

Yes.

> If one wants to use different encryption algorithms,
> the only way is to use manual keys, right?

Yes. Or use some other key management protocol.

> Thanks in advance,
> 
> Hiroki I.
> NEC Corp.

Valery Smyslov
TrustWorks B.V.


References: