Research of Main Mode with a Pre-Shared Key in IKE Protocol
Yongping Zhang · Journal of Nanjing University of Posts and Telecommunications · 2007
IKE becomes the most significant protocol of the key exchange in Internet.Following an introduction to the mechanism of IKE,the security of the whole message-exchanging process is analyzed.Considering the existing deficiency of IKE,a new improved model is presented in the main mode with a pre-shared key in order to protect the security of the pre-shared key and resist the attacks of man-in-the-middle and DoS.Meanwhile,the concept of identity-hashing payload and the idea of adopting twice authentication are provided. Finally,based on the open code of freeS/WAN,the paper modifies and adds some appropriate functions to put the idea into improvement.