phase 1 Authenticated With Public Key Encryption

[email protected]
Newsgroups gmane.network.freeswan.devel
Message-ID <[email protected]>
hi
when we use automatic method of key exchange,we are exchanging the public
RSA keys of
the communicating machines and putting them in ipsec.conf under the
respective section.

after the keys are proccured , either using DNS or by physically exchanging
the public keys,
the sequence of messages during the phase 1 exchange should be as per
sections   in IKE RFC 2409.

i just wanted to know which method is freeswan following.
if it is the case as given in section 5.2, then has the message sequence ,
as in sectn 5.3 , also been implemented.

iam not commenting on how freeswan should implement . it is just a
confirmation for my observations.

5.2-"5.2 Phase 1 Authenticated With Public Key Encryption" and
      Initiator                        Responder
       -----------                      -----------
        HDR, SA                   -->
                                  <--    HDR, SA
        HDR, KE, [ HASH(1), ]
          <IDii_b>PubKey_r,
            <Ni_b>PubKey_r        -->
                                         HDR, KE, <IDir_b>PubKey_i,
                                  <--            <Nr_b>PubKey_i
        HDR*, HASH_I              -->
                                  <--    HDR*, HASH_R

5.3- "5.3 Phase 1 Authenticated With a Revised Mode of Public Key
Encryption"
      Initiator                        Responder
       -----------                      -----------
        HDR, SA                   -->
                                  <--    HDR, SA
        HDR, [ HASH(1), ]
          <Ni_b>Pubkey_r,
          <KE_b>Ke_i,
          <IDii_b>Ke_i,
          [<<Cert-I_b>Ke_i]       -->
                                         HDR, <Nr_b>PubKey_i,
                                              <KE_b>Ke_r,
                                  <--         <IDir_b>Ke_r,
        HDR*, HASH_I              -->
                                  <--    HDR*, HASH_R


thanks and regards.



---------------------------------------------------------------------------------------------------------

The greatest pleasure in life is doing
what people say you cannot do.
~ Walter Bagehot ~
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.