The Security Architecture for the Internet Protocol, IPsec, is already defining the way organizations and individuals secure their networks. There is no single document that describes IPsec, but rather an entire body of work, the Requests for Comments (RFC's). This book compiles and organizes these important documents in a single printed volume, and adds a glossary and extensive index. This means you no longer have to wade through countless RFC's trying to find the answer to your IPsec question - all solutions are compiled in a single book, with an index that makes them even easier to locate.
Every RFC describing an aspect of the IPsec standard is included here, as are descriptions of most of the cryptographic algorithms used in IPsec. If you buy one IPsec reference, this is the one to choose. Written by members of the IPsec Working Group and other Internet Engineering Task Force (IETF) members, this is the most authoritative IPsec text available.
Topics covered in this volume include:
- Security Architecture for the Internet Protocol (IPsec)
- The IP Encapsulating Security Payload (ESP)
- The IP Authentication Header (AH)
- The Internet Key Exchange (IKE) Protocol
- The OAKLEY Key Determination Protocol
- The Internet Security Association and Key Management Protocol (ISAKMP)
- Algorithm descriptions for MD4, MD5, RC5, RC2, CAST, DES, Diffie-Hellman
RFC 1320 The MD4 Message-Digest Algorithm
RFC 1321 The MD5 Message-Digest Algorithm
RFC 1828 IP Authentication using Keyed MD5
RFC 1829 The ESP DES-CBC Transform
RFC 2040 The RC5, RC5-CBC, RC5-CBC-Pad, and RC5-CTS Algorithms
RFC 2085 HMAC-MD5 IP Authentication with Replay Prevention
RFC 2104 HMAC: Keyed-Hashing for Message Authentication
RFC 2144 The CAST-128 Encryption Algorithm
RFC 2202 Test Cases for HMAC-MD5 and HMAC-SHA-1
RFC 2268 A Description of the RC2(r) Encryption Algorithm
RFC 2401 Security Architecture for the Internet Protocol
RFC 2402 IP Authentication Header
RFC 2403 The Use of HMAC-MD5-96 within ESP and AH
RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AH
RFC 2405 The ESP DES-CBC Cipher Algorithm With Explicit IV
RFC 2406 IP Encapsulating Security Payload (ESP)
RFC 2407 The Internet IP Security Domain of Interpretation for ISAKMP
RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP)
RFC 2409 The Internet Key Exchange (IKE)
RFC 2410 The NULL Encryption Algorithm and Its Use With IPsec
RFC 2411 IP Security Document Roadmap
RFC 2412 The OAKLEY Key Determination Protocol
RFC 2451 The ESP CBC-Mode Cipher Algorithms
RFC 2631 Diffie-Hellman Key Agreement Method
About the Author
Pete Loshin started using the Internet in 1988 and has written a dozen books about the Internet, electronic commerce, and TCP / IP. Formerly an editor at Byte Magazine, he has written articles for Information Security, PC World, PC Magazine, Communication News, PC Week, Telecommunications, and other well-known trade publications. Pete is based in eastern Massachusetts, and can be reached at pete@loshin.com for consulting on Internet issues.
