IPSec中密钥交换协议IKE的安全性研究及改进

Security Research and Improvement of IKE in IPSec

IKE协议的高效实现是IPSec的关键,在分析了IKE协议的基础上针对主模式交换下预共享密钥验证算法的不足,提出了抵御两种攻击的改进方案。

The high-efficient implementation of IKE is a key part of the Internet Security Protocol (IPSec). After the analysis of the mechanism of IKE, This paper demonstrates a security flaw on the main mode exchange of IKE with pre-shared-key authentication method and discusses possible amendments against two types of attack.