Internet密钥交换协议中主密钥的安全保护策略

Security Protect Policy of the Main Key in the Internet Key Exchange Protocol

讨论了主密钥安全保护在密钥管理中的重要地位，研究了IPSec及IKE协议的工作机制，分析了使用预共享密钥认证的IKE协议密钥存储的安全隐患，并给出了一种主密钥的安全保护方案。

This paper discusses the importance of the protect of the main key in the key management, studies the mechanism of IPSec and IKE protocol, analyzes the hidden trouble on key storage in IKE protocol with pre-shared key for authentication, and presents a protect scheme of main key.