Friday, 25 May 2012

IPSec (ESP, AH, DES, MD5, SHA, DH)

Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session.

The main job of ESP is to provide the privacy we seek for IP datagrams by encrypting them. An encryption algorithm combines the data in the datagram with a key to transform it into an encrypted form. This is then repackaged using a special format that we will see shortly, and transmitted to the destination, which decrypts it using the same algorithm. ESP also supports its own authentication scheme like that used in AH, or can be used in conjunction with AH.

 For IPsec to work, the sending and receiving devices must share a public key. This is accomplished through a protocol known as Internet Security Association and Key Management Protocol/Oakley (ISAKMP/Oakley), which allows the receiver to obtain a public key and authenticate the sender using digital certificates. 

 http://en.wikipedia.org/wiki/IPsec
http://www.tcpipguide.com/free/t_IPSecEncapsulatingSecurityPayloadESP.htm 
http://www.webopedia.com/TERM/I/IPsec.html

2 comments:

  1. It's a little bit saddening to see no one had commented on your blog:( But do not worry, I'm here to save the day!
    Good short post with very educational information. However, it can be more interesting if you've added some images, or maybe videos.

    ReplyDelete
  2. Thanks for explaining about public key infrastructure technique that is basically used to secure the data transfer using some cryptographic mechanism. In this article a great amount of detail is being provided about this useful concept.
    digital signature Adobe

    ReplyDelete