因特网密钥交换协议认证机制的研究

Research on the Protocol Authentication Mechanism of the Internet Key Exchange (IKE)

因特网密钥交换协议(IKE)是IPSec默认使用的密钥协商协议,目前应用广泛。本文在研究了IKE工作机制的基础上,对IKE提供的认证方法进行了比较,同时分析了IKE认证方法中存在的安全缺陷,并提出了改进方案。

After investigating the working mechanism of Internet Key Exchange (IKE), the paper compares the differences between the four types of authentication methods, analyses the potential flaws in these methods, and proposes some improved schemes.