[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Position statement on IKE development

To: msec@securemulticast.org
Subject: Re: Position statement on IKE development
From: Sandy Harris <sandy@storm.ca>
Date: Fri, 03 Aug 2001 09:34:33 -0400
CC: ietf-ipsra@vpnc.org, ipsec-policy@vpnc.org, ipsec@lists.tislabs.com
References: <3B69FF7B.85CF61@nortelnetworks.com>
Sender: owner-ipsec@lists.tislabs.com

Marcus Leech wrote:

> In the several years since the standardization of the IPSEC protocols
> (ESP, AH, and ISAKMP/IKE), there have come to light several security
> problems with the protocols, most notably the key-agreement protocol,
> IKE.  Formal and semi-formal analyses by Meadows, Schneier et al, and
> Simpson, have shown that the security problems in IKE stem directly
> from its complexity. ...

For anyone who has not seen those papers, there are links to them at:

http://www.freeswan.org/freeswan_trees/freeswan-1.91/doc/web.html#analysis

References:

Position statement on IKE development

From: "Marcus Leech" <mleech@nortelnetworks.com>

Prev by Date: RE: problem with HMAC precomputes.
Next by Date: Re: Position statement on IKE development
Prev by thread: Re: Position statement on IKE development
Next by thread: Re: Position statement on IKE development
Index(es):
- Main
- Thread