Questions tagged [ipsec]
For questions about the cryptographic protocols which form the basis of IPsec, which is one of the common security schemes used on the throughout. For general questions about IPsec, consider if your question fits our sister sites Super User and/or Security Stack Exchange better.
27
questions
2
votes
1answer
82 views
Why can't AES-GCM be used in IKEv1 phase 1?
I was configuring a VPN on a firewall (fortigate) and realized that I could use AES-GCM for encryption in the IKEv1 phase 2 but not in the phase 1 and I was wondering why knowing that in IKEv2 we ...
0
votes
1answer
60 views
If we know the pre-shared key of an IPSec tunnel, can PFS help us to stay encrypted?
Or if the "attacker" has the pre-shared key, then PFS won't help?
Ex.: Heard something about China that it blocks IPSec and only allows it when you give them your pre-shared key, thus they can see ...
1
vote
1answer
86 views
ipsec, esp: Which key is used to generate the HMAC
Short Question:
Are the keys for the ICV calculation and the encryption the same in IPSEC/ESP?
Or do there exist two keys in the SA?
Long Question:
Before a new IPSEC-ESP connection is established, ...
2
votes
1answer
357 views
IPsec : transmission of Initialization Vector
I am currently carrying scholar research about IPsec protocol, and I have a question regarding the IP Encapsulating Security Payload (ESP). Is the initialization vector of operation mode transmitted ...
0
votes
1answer
380 views
How does OpenVPN work?
I'm confused with the technologies that OpenVPN uses. The official site mentions it uses SSL/TLS in-place of IKEv1/IKEv2, and uses IPSec ESP to secure the data, and yet that it isn't compatible with ...
0
votes
2answers
265 views
IKEv2 DH Group on SonicWall
I am developing internal standards for IPsec VPN setup on SonicWall firewalls, and I have been learning about IKEv2. When IKEv2 "mode" is selected, the UI disables the DH Group, Encryption, and ...
2
votes
2answers
126 views
Bellovin ESP Attack on UDP Packets
In Bellovin's ESP Attack,
it is stated that:
If $L_A$, $L_B$ are using UDP, attack is easier:
Wait till session ends
Allocate $L_B$'s UDP port to $X_B$
Replay all packets
So, how ...
0
votes
2answers
292 views
why IPSec transport mode is restricted for host-to-host communication , or host-to-gateway where gateway acts as a host only?
Transport mode is allowed between two end hosts only; tunnel mode is required when at least one of the endpoints is a "security gateway" (intermediate system that implements IPsec functionality, e.g....
2
votes
1answer
876 views
Why a “Next Header” field is part of ESP trailer?
Please explain are there any reason under the hood to place "Next Header" field in ESP trailer instead of ESP Header ?
1
vote
1answer
5k views
IPSec vs SSL : Similarities and Differences
I am studying SSL and IPSec. I can pretty much nail down the "very high level" differences and similarities between the two, but am struggling to find a "lower level" (but not too deep) look.
This ...
1
vote
1answer
313 views
Does IKEv1 support multiple combinations of a source IP range?
I saw in several places online that the different between IKEv1 and IKEv2 is the use of multiple combinations of a source IP range as left and right subnets (locally and remote), a destination IP ...
0
votes
1answer
2k views
How is the SPI determined/negotiated in phase 2 of IKE (v1)?
While I am aware that the SPI (along with destination IP and protocol) is used to uniquely identify an incoming SA on a peer, for the life of me I am not able to understand how that particular SPI ...
1
vote
0answers
198 views
1
vote
1answer
232 views
Why TLS uses in-band handshake signalling
TLS uses handshake protocol to compute session keys to be used later to protect bulk of application data transfer. The handshake protocol and application protocol uses same transport layer port.
...
-1
votes
1answer
298 views
ESP in tunnel mode [closed]
When Encapsulating Security Payload (ESP) is used in the tunnel mode, a new IP header is computed and added. Why is this necessary? Thank you.
2
votes
1answer
298 views
where does the prime number taken in DH algorithm in IPSEC
I am studying & configuring IPSEC ikev1 and in between i am analysing the wireshark captures. I am using the linux kernel for TCP/IP stack and user-space i took ipsec-tools.
In the first two ...
3
votes
1answer
422 views
Can authenticated encryption reduce bandwidth overhead of per-packet encryption?
I know that authenticated encryption modes of operation like GCM offer certain security advantages, as well as increased performance. (On my laptop with AES-NI, the benchmark performance of ...
7
votes
1answer
383 views
Detection of weak keys for AES-GCM
There are many papers out there that show that a message authenticated and encrypted by AES-GCM can be forged if the used key is weak (e.g. by Handschuh and Preneel, Saarinen or Procter and Cid). With ...
0
votes
1answer
1k views
IPSec recomendations about rekeying
IPSec like strongSwan can be configured to do rekeying after time or bytes transferred or packets transmitted. Is there any recommendations to set those settings? Maybe according to algorithms used?
5
votes
1answer
228 views
Is IPsec IND-CCA secure provided the used block cipher is a pseudorandom function?
I am trying to solve the question whether
"IPsec is IND-CCA secure provided the used block cipher is a pseudorandom function" (with IPsec using a variant of Encrypt-then-MAC)
As a resource I am given ...
1
vote
0answers
207 views
AES-GCM Hash sub key parameter in Intel's IPsec library
I am trying to use Intel's optimized AES-128-GCM implementation (from the Intel white paper “Fast Multi-buffer IPsec Implementations on Intel Architecture Processors”, you can find the code here).
...
4
votes
1answer
3k views
What are the problems of IKEv1 aggressive mode (compared to IKEv1 main mode or IKEv2)?
I would like to seek confirmation/clarification of the following statements about IKE:
IKEv1 aggressive mode is supposed to be “insecure” if used with PSK. But as far as I can see, correct (or more ...
2
votes
0answers
337 views
What are the well known protocols that offer perfect forward secrecy? [closed]
As far as I know these are the well known protocols that offer PFS
TLS/SSL (with DHE-RSA, DHE-DSS, ECDHE-RSA or ECDHE-ECDSA)
SSH (RFC4253)
OTR (Protocol Version 3 Spec)
IPsec (with IKEv1 and IKEv2) (...
1
vote
1answer
2k views
IPsec authentication and encryption lgorithms
I am looking for the implementation of IPsec security algorithms for both
authentication and Encryption.
Is there any open source implementation available for the same ?
And if someone supposed to ...
4
votes
1answer
9k views
Does IKEv2 protocol have two modes like IKE
IKE Protocol have 2 modes, that modes have different structure. Does IKEv2 protocol have two modes like IKE.
2
votes
1answer
522 views
Bellovin 96' attack on IPsec ESP protocol on encryption only option
Can you explain the actual attack?
Why does the attacker need to firstly send some arbitrary UDP packet?
How can the attacker break the privacy between A and B?
Link: The article of Bellovin
I'm ...
8
votes
1answer
41k views
What is the “shared secret” used for in IPSec VPN?
Can somebody explain what the "shared secret" and "password" do when opening/creating a VPN tunnel?
In this specific case I setup a VPN to my Fritz!Box and I had to provide a shared secret (which was ...
