Oakley protocol
Encyclopedia
The Oakley Key Determination Protocol is a key-agreement protocol
that allows authenticated parties to exchange keying material across an insecure connection using the Diffie-Hellman key exchange
algorithm. The protocol was proposed by H. Orman in 1998, and formed the basis for the more widely used Internet key exchange
protocol.
The Oakley protocol has also been implemented in Cisco Systems
' ISAKMP daemon
.
Key-agreement protocol
In cryptography, a key-agreement protocol is a protocol whereby two or more parties can agree on a key in such a way that both influence the outcome. If properly done, this precludes undesired third-parties from forcing a key choice on the agreeing parties...
that allows authenticated parties to exchange keying material across an insecure connection using the Diffie-Hellman key exchange
Diffie-Hellman key exchange
Diffie–Hellman key exchange Synonyms of Diffie–Hellman key exchange include:*Diffie–Hellman key agreement*Diffie–Hellman key establishment*Diffie–Hellman key negotiation...
algorithm. The protocol was proposed by H. Orman in 1998, and formed the basis for the more widely used Internet key exchange
Internet key exchange
Internet Key Exchange is the protocol used to set up a security association in the IPsec protocol suite. IKE builds upon the Oakley protocol and ISAKMP...
protocol.
The Oakley protocol has also been implemented in Cisco Systems
Cisco Systems
Cisco Systems, Inc. is an American multinational corporation headquartered in San Jose, California, United States, that designs and sells consumer electronics, networking, voice, and communications technology and services. Cisco has more than 70,000 employees and annual revenue of US$...
' ISAKMP daemon
Daemon (computer software)
In Unix and other multitasking computer operating systems, a daemon is a computer program that runs as a background process, rather than being under the direct control of an interactive user...
.
External links
- RFC 2412 The OAKLEY Key Determination Protocol
- RFC 2409 The Internet Key Exchange (IKE)