基于预共享密钥IKESA的分析与改进

Analysis and amendment of the internet key exchange protocol based on pre-share-key

分析了基于预共享密钥IKESA协商过程中存在的安全问题 ,提出了改进HASH计算的新方法 .分析表明 ,该方法降低了对内存的消耗 ,提高了IKESA协商过程的安全性 .

This paper analyzes the negotiations of IKE SA based on pre shared key, demonstrates a security flaw on the authentication of IKE SA, and defines a new method for calculating the authentication HASH of the IKE SA protocol. The new method makes the memory consumption smaller and improves the security of the IKE SA.