RFC 6989: Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2)

In plain English — editorial summary, not part of the RFC

This document adds a small number of mandatory tests required for the secure operation of the Internet Key Exchange Protocol version 2 (IKEv2) with elliptic curve groups. No change is required to IKE implementations that use modular exponential groups, other than a few rarely used so-called Digital Signature Algorithm (DSA) groups. This document updates the IKEv2 protocol, RFC 5996.

Document record

Document ID

RFC6989

Published

July 2013

Authors

Y. Sheffer; S. Fluhrer

Status

PROPOSED STANDARD

Stream

IETF

Area

sec

Pages

10

Also known as

—

Updates:

RFC 5996

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC6989

Topics

• Elliptic Curve cryptography
• secret key reuse
• recipient tests

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 8410Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key InfrastructureUpdated

  August 2018

• RFC 5489ECDHE_PSK Cipher Suites for Transport Layer Security (TLS)Current

  March 2009

• RFC 9142Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)Current

  January 2022

• RFC 9295Clarifications for Ed25519, Ed448, X25519, and X448 Algorithm IdentifiersCurrent

  September 2022

• RFC 7027Elliptic Curve Cryptography (ECC) Brainpool Curves for Transport Layer Security (TLS)Current

  October 2013

• RFC 5903Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2Current

  June 2010

• RFC 5091Identity-Based Cryptography Standard (IBCS) #1: Supersingular Curve Implementations of the BF and BB1 CryptosystemsUpdated

  December 2007

• RFC 7009OAuth 2.0 Token RevocationCurrent

  August 2013

Also filed under

• PROPOSED STANDARD
• 2013
• IETF stream
• sec area