RFC 4868: Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec

This specification describes the use of Hashed Message Authentication Mode (HMAC) in conjunction with the SHA-256, SHA-384, and SHA-512 algorithms in IPsec.…

Read RFC 4868 on the RFC Editor

Incoming relationships (25 related RFCs)

Normatively referenced by — RFC 7518: JSON Web Algorithms (JWA)
Normatively referenced by — RFC 6830: The Locator/ID Separation Protocol (LISP)
Normatively referenced by — RFC 6407: The Group Domain of Interpretation
Normatively referenced by — RFC 7401: Host Identity Protocol Version 2 (HIPv2)
Normatively referenced by — RFC 9301: Locator/ID Separation Protocol (LISP) Control Plane
Normatively referenced by — RFC 9145: Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers
Normatively referenced by — RFC 7635: Session Traversal Utilities for NAT (STUN) Extension for Third-Party Authorization
Normatively referenced by — RFC 4869: Suite B Cryptographic Suites for IPsec
Normatively referenced by — RFC 6812: Cisco Service-Level Assurance Protocol
Normatively referenced by — RFC 9303: Locator/ID Separation Protocol Security (LISP-SEC)
Normatively referenced by — RFC 7402: Using the Encapsulating Security Payload (ESP) Transport Format with the Host Identity Protocol (HIP)
Normatively referenced by — RFC 7652: Port Control Protocol (PCP) Authentication Mechanism
Normatively referenced by — RFC 7868: Cisco's Enhanced Interior Gateway Routing Protocol (EIGRP)
Normatively referenced by — RFC 8263: Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message
Normatively referenced by — RFC 9150: TLS 1.3 Authentication and Integrity-Only Cipher Suites
Normatively referenced by — RFC 9647: A YANG Data Model for Babel
Informatively referenced by — RFC 8762: Simple Two-Way Active Measurement Protocol
Informatively referenced by — RFC 8221: Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
Informatively referenced by — RFC 8945: Secret Key Transaction Authentication for DNS (TSIG)
Informatively referenced by — RFC 6071: IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap
Informatively referenced by — RFC 8972: Simple Two-Way Active Measurement Protocol Optional Extensions
Informatively referenced by — RFC 7539: ChaCha20 and Poly1305 for IETF Protocols
Informatively referenced by — RFC 4894: Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec
Informatively referenced by — RFC 6630: EAP Re-authentication Protocol Extensions for Authenticated Anticipatory Keying (ERP/AAK)
Informatively referenced by — RFC 5981: Authorization for NSIS Signaling Layer Protocols