2

Are there any disadvantage of using it as in IKEv1? Well, there were a couple of things; the most glaring one was determining why the negotiation failed. What happened if two IKEv1 implementations tried to negotiate with different PSKs? What happened was that they derived different keys, and so it would fail - with no indication that the failure reason was ...


1

If you are implementing this for commercial purpose, respectively if security is crucial, then there are standards and somewhat "best practices" (like the TLS Protocol Specs). In general when you want two parties to agree on a shared secret key, some kind of Key-Exchange like Diffie-Hellman or ECDH is applied. Often this goes hand-in-hand with some ...


1

Why different keys are generated for initator and responder for encryption? Well, some encryption algorithms (for example, GCM and ChaCha/Poly1305) are unsafe if multiple encryptors can use the same keys. This could be managed (in the above examples, by making sure that the two sides use different nonces, e.g. the initiator always uses even nonces and the ...


Only top voted, non community-wiki answers of a minimum length are eligible