RFC 6631: Password Authenticated Connection Establishment with the Internet Key Exchange Protocol version 2 (IKEv2)

The Internet Key Exchange protocol version 2 (IKEv2) does not allow secure peer authentication when using short credential strings, i.e., passwords. Several…

Read RFC 6631 on the RFC Editor

Outgoing relationships (10 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4301: Security Architecture for the Internet Protocol
Normative reference — RFC 3454: Preparation of Internationalized Strings ("stringprep")
Normative reference — RFC 5996: Internet Key Exchange Protocol Version 2 (IKEv2)
Normative reference — RFC 4013: SASLprep: Stringprep Profile for User Names and Passwords
Normative reference — RFC 2785: Methods for Avoiding the "Small-Subgroup" Attacks on the Diffie-Hellman Key Agreement Method for S/MIME
Informative reference — RFC 5723: Internet Key Exchange Protocol Version 2 (IKEv2) Session Resumption
Informative reference — RFC 5282: Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) Protocol
Informative reference — RFC 6467: Secure Password Framework for Internet Key Exchange Version 2 (IKEv2)
Informative reference — RFC 5998: An Extension for EAP-Only Authentication in IKEv2