Data Protection and Security

VIII

Standards and Protocols

VIII.V

IPsec

IKE

IKE is a protocol for doing mutual authentication and establishing a shared key for the IPsec SA. IKE is a very complex protocol and has different modes of operation however the general idea is to perform an authenticated Diffie-Hellman key exchange which is explained in Chapter 4. IKE also allows parties to negotiate cryptographic algorithms and other parameters.