| Hi Ashot, On Jul 28, 2009, at 1:31 PM, Andreasyan Ashot-C23793 wrote:
that's a good question. The Diffe-Hellman protocols in the NIST key management documents are based on ANSI and IEEE standards that were developed concurrently with ISAKMP/OAKLEY/IKE. They are functionally equivalent in some ways, but they are different and incompatible in other ways. Personally, I would like to see these standards be reconciled, with preference going towards what they industry is actually implementing and using whenever it is reasonably secure. I would expect this reconciliation to be a long term project. Other opinions are welcome. If you are interested in the NIST key management documents, you might want to review the NIST White Paper on transitioning algorithms and key sizes, see http://csrc.nist.gov/groups/ST/key_mgmt/ Note that the review period closes on August 3. David
|