IKE Phase1 3rd message pair

May 22, 2006 4 Replies

Rate this thread:

pvsnmp 20 years ago

Hi, This is a follow up of the below mentioned discussion.

formatting link

I would like to know what does the recipient of message 5 of IKE phase

1 do with the ID payload?? Same question applies to the recipient of message 6.

Thanks and Regards, Prashant

Vote

Stephen J. Bevan 20 years ago

formatting link

I answered that in the last message in the thread you reference.

Vote

pvsnmp 20 years ago

Hi Stephen,

In pre-shared key authentication, does the recipient of message 5 or 6 do anything else with the ID than using it for computation of hash?

Thanks and Regards, Prashant

Vote

Stephen J. Bevan 20 years ago

The recipient should validate the ID according to their security policy the details of which are not dictated by IKE. So, it can vary from doing no validation (common if the ID is an IP address) to doing checks like the ones I describe in the paragraph you quote.

Vote

pvsnmp 20 years ago

Thanks Stephen for the reply.

Prashant

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required