IPSec下密钥交换协议的研究

The Research of the Key Exchange Protocol For IPSec

本文首先介绍了IPSec下现有密钥交换协议IKE,以及新一代密钥交换规范IKEv2,尤其是他们的协商原理。针对IKE在性能和安全方面的缺陷,分析比较了IKEv2在密钥交换的安全性和高效性上所做出的改进。为构建VPN网络等应用场合,指明了密钥交换协议的选取依据。

At first, this paper introduces the key exchange protocol IKE for IPSec, the new generation of key exchange standard IKEv2, and especially the consultative principles. It analyzes the flaws that IKE has in its performance and security, compares IKE with IKEv2, which has been improved in its security and efficiency in key exchange. All this paves the way for the selecting the standard of key exchange protocol when we construct network such as VPN.