RFC 4107: Guidelines for Cryptographic Key Management

The question often arises of whether a given security system requires some form of automated key management, or whether manual keying is sufficient. This memo…

Read RFC 4107 on the RFC Editor

Incoming relationships (23 related RFCs)

Normatively referenced by — RFC 8754: IPv6 Segment Routing Header (SRH)
Normatively referenced by — RFC 7416: A Security Threat Analysis for the Routing Protocol for Low-Power and Lossy Networks (RPLs)
Normatively referenced by — RFC 5376: Inter-AS Requirements for the Path Computation Element Communication Protocol (PCECP)
Normatively referenced by — RFC 6421: Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS)
Normatively referenced by — RFC 9145: Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers
Normatively referenced by — RFC 8241: Interface to the Routing System (I2RS) Security-Related Requirements
Normatively referenced by — RFC 9459: CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC
Informatively referenced by — RFC 5440: Path Computation Element (PCE) Communication Protocol (PCEP)
Informatively referenced by — RFC 5920: Security Framework for MPLS and GMPLS Networks
Informatively referenced by — RFC 5116: An Interface and Algorithms for Authenticated Encryption
Informatively referenced by — RFC 7201: Options for Securing RTP Sessions
Informatively referenced by — RFC 6830: The Locator/ID Separation Protocol (LISP)
Informatively referenced by — RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS
Informatively referenced by — RFC 6833: Locator/ID Separation Protocol (LISP) Map-Server Interface
Informatively referenced by — RFC 5151: Inter-Domain MPLS and GMPLS Traffic Engineering -- Resource Reservation Protocol-Traffic Engineering (RSVP-TE) Extensions
Informatively referenced by — RFC 4974: Generalized MPLS (GMPLS) RSVP-TE Signaling Extensions in Support of Calls
Informatively referenced by — RFC 6518: Keying and Authentication for Routing Protocols (KARP) Design Guidelines
Informatively referenced by — RFC 8489: Session Traversal Utilities for NAT (STUN)
Informatively referenced by — RFC 9099: Operational Security Considerations for IPv6 Networks
Informatively referenced by — RFC 4808: Key Change Strategies for TCP-MD5
Informatively referenced by — RFC 4564: Objectives for Control and Provisioning of Wireless Access Points (CAPWAP)
Informatively referenced by — RFC 7298: Babel Hashed Message Authentication Code (HMAC) Cryptographic Authentication
Informatively referenced by — RFC 8921: Dynamic Service Negotiation: The Connectivity Provisioning Negotiation Protocol (CPNP)