互联网密钥交换协议及其安全性分析.pdf

文档介绍：1000-9825/2003/14(03)0600 ©2003 Journal of Software 软 件 学 报 ,
∗
互联网密钥交换协议及其安全性分析
范 红+
(中国科学院 研究生院 信息安全国家重点实验室,北京 100039)
An Internet Key Exchange Protocol and Its Security Analysis
FAN Hong+
(State Key Laboratory of Information Security, Graduate School, The Chinese Academy of Sciences, Beijing 100039, China)
+ Corresponding author: Phn: 86-10-88258010, E-mail: ******@; ******@
Received 2001-10-23; Accepted 2002-06-12
Fan H. An Internet key exchange protocol and its security analysis. Journal of Software, 2003,14(3):600~605.
Abstract: The complexity of Internet key exchange protocol causes some potential secure flaws. The possible
attacks suffered by IKE protocol based on the in-depth analysis of its operational principle are discussed.
Key words: IKE protocol; mode; key; security analysis; attack

摘 要: 互联网密钥交换(Internet key exchange) IKE 协议
工作原理的基础上,探讨了其可能遭受的攻击.
关键词: IKE 协议;模式;密钥;安全性分析;攻击
中图法分类号: TP309 文献标识码: A
IKE 协议是 IPSec 定义的密钥交换技术,它沿用了 ISAKMP 的基础、OAKLEY 的模式以及 SKEME 的共享
和密钥更新技术,从而定义出自己独一无二的验证加密材料生成技术和共享策略协商