IP Security Protocol (ipsec)

This Working Group did not meet

In addition to this official charter maintained by the IETF Secretariat, there is additional information about this working group on the Web at:

       http://www.vpnc.org/ietf-ipsec/ -- Additional IPSEC Web Page
NOTE: This charter is a snapshot of the 60th IETF Meeting in San Diego, CA USA. It may now be out-of-date.

Last Modified: 2004-06-07

Chair(s):
Barbara Fraser <byfraser@cisco.com>
Theodore Ts'o <tytso@mit.edu>
Security Area Director(s):
Russell Housley <housley@vigilsec.com>
Steven Bellovin <smb@research.att.com>
Security Area Advisor:
Russell Housley <housley@vigilsec.com>
Technical Advisor(s):
Angelos Keromytis <angelos@cs.columbia.edu>
Tero Kivinen <kivinen@safenet-inc.com>
Mailing Lists:
General Discussion: ipsec@ietf.org
To Subscribe: ipsec-request@ietf.org
Archive: http://www.ietf.org/mail-archive/web/ipsec/index.html
Description of Working Group:

Goals and Milestones:
Done  Post as an Internet-Draft the IP Security Protocol.
Done  Post as an Interenet-Draft the specification for Internet key management.
Done  Submit the Internet Key Management Protocol to the IESG for consideration as a Proposed Standard.
Done  Conduct initial interoperability testing of Encapsulating Security payload (ESP) and Authentication Header (AH).
Done  Submit revised Interent-Drafts for ESP, AH, and IP Security Architecture.
Done  Submit revised Internet-Drafts of IP Security Architecture, ESP, and AH to the IESG for consideration as Draft Standards.
Done  Submit Internet-Draft of the Internet Key Management Protocol (IKMP) based on ISAKMP/Oakley to the IESG for consideration as a Proposed Standard.
Done  Submit Internet-Draft of Internet Key Management Protocol to the IESG for consideration as a Proposed Standard.
Done  Internet Drafts on NAT and Firewall traversal, IKE MIBs, and requirements for IPsec and IKE for use with SCTP, to working group last call.
Done  Submit revised Internet-Drafts of NAT and Firewall traversal, IKE MIBs, and SCTP support for considerations as Draft Standards.
Done  Internet-Drafts on sequence number expansion in IKE, and IKE re-keying completed.
Done  Internet-Drafts on AES/SHA-2, sequence number expansion, and IKE re-keying to working group last call.
Done  Internet-Draft on IKE v2 Requirements to working group last call
Done  Internet-Drafts describing candidate IKE v2 approaches submitted to the working group.
Done  Submit revised Internet-Drafts on AES/SHA-2, sequence number expansion, and IKE rekeying for consideration as Draft Standards.
Done  Discuss and select the IKE v2 design from candidate approaches.
Done  Submit IKEv2 for consideration as Draft Standard
Nov 03  Revised draft on IPsec Architecture to working group last call
Jan 04  Submit revised draft on IPsec Architecture for consideration as Draft Standard
Internet-Drafts:
  • - draft-ietf-ipsec-esp-v3-08.txt
  • - draft-ietf-ipsec-nat-t-ike-08.txt
  • - draft-ietf-ipsec-udp-encaps-09.txt
  • - draft-ietf-ipsec-ikev2-14.txt
  • - draft-ietf-ipsec-rfc2402bis-07.txt
  • - draft-ietf-ipsec-pki-profile-04.txt
  • - draft-ietf-ipsec-esn-addendum-03.txt
  • - draft-ietf-ipsec-ciph-aes-ccm-05.txt
  • - draft-ietf-ipsec-ikev2-algorithms-05.txt
  • - draft-ietf-ipsec-ui-suites-06.txt
  • - draft-ietf-ipsec-rfc2401bis-02.txt
  • - draft-ietf-ipsec-esp-ah-algorithms-01.txt
  • - draft-ietf-ipsec-ikev2-iana-02.txt
  • - draft-ietf-ipsec-ciph-aes-gcm-00.txt
    • Request For Comments:
    RFCStatusTitle
    RFC1829 PS The ESP DES-CBC Transform
    RFC1827 PS IP Encapsulating Security Payload (ESP)
    RFC1828 PS IP Authentication using Keyed MD5
    RFC1826 PS IP Authentication Header
    RFC1825 PS Security Architecture for the Internet Protocol
    RFC2104 I HMAC: Keyed-Hashing for Message Authentication
    RFC2085 PS HMAC-MD5 IP Authentication with Replay Prevention
    RFC2401 PS Security Architecture for the Internet Protocol
    RFC2410 PS The NULL Encryption Algorithm and Its Use With IPsec
    RFC2411 I IP Security Document Roadmap
    RFC2402 PS IP Authentication Header
    RFC2412 I The OAKLEY Key Determination Protocol
    RFC2451 PS The ESP CBC-Mode Cipher Algorithms
    RFC2403 PS The Use of HMAC-MD5-96 within ESP and AH
    RFC2404 PS The Use of HMAC-SHA-1-96 within ESP and AH
    RFC2405 PS The ESP DES-CBC Cipher Algorithm With Explicit IV
    RFC2406 PS IP Encapsulating Security Payload (ESP)
    RFC2407 PS The Internet IP Security Domain of Interpretation for ISAKMP
    RFC2408 PS Internet Security Association and Key Management Protocol (ISAKMP)
    RFC2409 PS The Internet Key Exchange (IKE)
    RFC2857 PS The Use of HMAC-RIPEMD-160-96 within ESP and AH
    RFC3526 PS More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
    RFC3554 PS On the Use of Stream Control Transmission Protocol (SCTP) with IPsec
    RFC3566 PS The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec
    RFC3602 PS The AES-CBC Cipher Algorithm and Its Use with IPsec
    RFC3664StandardThe AES-XCBC-PRF-128 algorithm for IKE
    RFC3686StandardUsing AES Counter Mode With IPsec ESP
    RFC3706 I A Traffic-Based Method of Detecting Dead IKE Peers
    RFC3715 I IPsec-NAT Compatibility Requirements

    Current Meeting Report

    None received.

    Slides

    None received.