Hi, a new version of the draft contains few clarifications and minor editorial changes. We believe the draft is stable and ready for WGLC.
Regards, Valery (for the authors). > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the IP Security Maintenance and Extensions WG of > the IETF. > > Title : Multiple Key Exchanges in IKEv2 > Authors : C. Tjhai > M. Tomlinson > G. Bartlett > S. Fluhrer > D. Van Geest > O. Garcia-Morchon > Valery Smyslov > Filename : draft-ietf-ipsecme-ikev2-multiple-ke-03.txt > Pages : 23 > Date : 2021-07-06 > > Abstract: > This document describes how to extend the Internet Key Exchange > Protocol Version 2 (IKEv2) to allow multiple key exchanges to take > place while computing a shared secret during a Security Association > (SA) setup. The primary application of this feature in IKEv2 is the > ability to perform one or more post-quantum key exchanges in > conjunction with the classical (Elliptic Curve) Diffie-Hellman key > exchange, so that the resulting shared key is resistant against > quantum computer attacks. Another possible application is the > ability to combine several key exchanges in situations when no single > key exchange algorithm is trusted by both initiator and responder. > > This document updates RFC7296 by renaming a transform type 4 from > "Diffie-Hellman Group (D-H)" to "Key Exchange Method (KE)" and > renaming a field in the Key Exchange Payload from "Diffie-Hellman > Group Num" to "Key Exchange Method". It also renames an IANA > registry for this transform type from "Transform Type 4 - Diffie- > Hellman Group Transform IDs" to "Transform Type 4 - Key Exchange > Method Transform IDs". These changes generalize key exchange > algorithms that can be used in IKEv2. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-multiple-ke/ > > There is also an htmlized version available at: > https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-multiple-ke-03 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-ipsecme-ikev2-multiple-ke-03 > > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > > _______________________________________________ > IPsec mailing list > IPsec@ietf.org > https://www.ietf.org/mailman/listinfo/ipsec _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
