IPSEC

(Replay Window Description): Window Range: $[N, N + W - 1]$ Packet condition (left of window): $Sequence Number < N$ Packet condition (inside window): $N \leq Sequence Number \leq N + W - 1$ Packet condition (right of window): $Sequence Number > N + W - 1$

(Diffie-Hellman Key Exchange): Initiator’s Half-Key: $K E - I = g^{i} mod p$ Responder’s Half-Key: $K E - R = g^{r} mod p$ Shared Secret Key: $K = g^{i r} mod p$

(IKE Phase I Key Calculations): SKEYID (Preshared Key Method): $S K E Y I D = p r f (preshared-key, N - I ∣ N - R)$ SKEYID (Public Key Method): $S K E Y I D = p r f (N - I ∣ N - R, g^{i r})$ SKEYID (Digital Signature Method): $S K E Y I D = p r f (hash (N - I ∣ N - R), Cookie-I ∣ Cookie-R)$ Derived Key SKEYID_d: $S K E Y I D_d = p r f (S K E Y I D, g^{i r} ∣ Cookie-I ∣ Cookie-R ∣0)$ Authentication Key SKEYID_a: $S K E Y I D_a = p r f (S K E Y I D, S K E Y I D_d ∣ g^{i r} ∣ Cookie-I ∣ Cookie-R ∣1)$ Encryption Key SKEYID_e: $S K E Y I D_e = p r f (S K E Y I D, S K E Y I D_a ∣ g^{i r} ∣ Cookie-I ∣ Cookie-R ∣2)$ Initiator Hash: $H A S H - I = p r f (S K E Y I D, K E - I ∣ K E - R ∣ Cookie-I ∣ Cookie-R ∣ S A - I ∣ I D - I)$ Responder Hash: $H A S H - R = p r f (S K E Y I D, K E - I ∣ K E - R ∣ Cookie-I ∣ Cookie-R ∣ S A - I ∣ I D - R)$

(Revised Public-Key Method Temporary Keys): Initiator’s Temporary Key: $K - I = p r f (N - I, Cookie-I)$ Responder’s Temporary Key: $K - R = p r f (N - R, Cookie-R)$

(IKE Phase II / Quick Mode Calculations): Quick Mode Hash 1: $H A S H 1 = p r f (S K E Y I D_d, M s g I D ∣ S A ∣ N - I)$ Quick Mode Hash 2: $H A S H 2 = p r f (S K E Y I D_d, M s g I D ∣ S A ∣ N - R)$ Quick Mode Hash 3: $H A S H 3 = p r f (S K E Y I D_d, 0∣ M s g I D ∣ S A ∣ N - I ∣ N - R)$ IPSec Key Material (without PFS): $K = p r f (S K E Y I D_d, protocol ∣ SP I ∣ N - I ∣ N - R)$ IPSec Key Material (with PFS): $K = p r f (S K E Y I D_d, g_{new}^{i r} ∣ protocol ∣ SP I ∣ N - I ∣ N - R)$

(IPSec Key Material Derivation Sequence): First Key Segment: $K_{1} = p r f (S K E Y I D_d, protocol ∣ SP I ∣ N - I ∣ N - R)$ Second Key Segment: $K_{2} = p r f (S K E Y I D_d, K_{1} ∣ protocol ∣ SP I ∣ N - I ∣ N - R)$ Third Key Segment: $K_{3} = p r f (S K E Y I D_d, K_{2} ∣ protocol ∣ SP I ∣ N - I ∣ N - R)$ Concatenated Key: $K = K_{1} ∣ K_{2} ∣ K_{3} ∣ \dots$

Quartz 4

Explorer

IPSEC

Graph View

Backlinks