From aaa0331ecf95ced1e913ac9be50168cf0e7cbb82 Mon Sep 17 00:00:00 2001 From: Rene Mayrhofer Date: Tue, 30 Jan 2007 12:21:07 +0000 Subject: [svn-upgrade] Integrating new upstream version, strongswan (2.8.2) --- doc/src/rfc.html | 158 ------------------------------------------------------- 1 file changed, 158 deletions(-) delete mode 100644 doc/src/rfc.html (limited to 'doc/src/rfc.html') diff --git a/doc/src/rfc.html b/doc/src/rfc.html deleted file mode 100644 index 762c66c6e..000000000 --- a/doc/src/rfc.html +++ /dev/null @@ -1,158 +0,0 @@ - - - - IPsec RFCs - - - - - -

IPsec RFCs and related documents

- -

The RFCs.tar.gz Distribution File

- -

The Linux FreeS/WAN distribution is available from our primary distribution site and -various mirror sites. To give people more control over their downloads, the -RFCs that define IP security are bundled separately in the file -RFCs.tar.gz.

- -

The file you are reading is included in the main distribution and is -available on the web site. It describes the RFCs included in the RFCs.tar.gz bundle and gives some pointers to other ways to get them.

- -

Other sources for RFCs & Internet drafts

- -

RFCs

- -

RFCs are downloadble at many places around the net such as:

- - -

browsable in HTML form at others such as:

- - -

and some of them are available in translation:

- - -

There is also a published Big Book of IPSEC -RFCs.

- -

Internet Drafts

- -

Internet Drafts, working documents which sometimes evolve into RFCs, are -also available.

- - -

Note: some of these may be obsolete, replaced by later drafts or by -RFCs.

- -

FIPS standards

- -

Some things used by IPsec, such as DES and SHA, are -defined by US government standards called FIPS. The issuing organisation, NIST, have a FIPS home page.

- -

What's in the RFCs.tar.gz bundle?

- -

All filenames are of the form rfc*.txt, with the * replaced with the RFC -number.

-
RFC#        Title
- -

Overview RFCs

-
2401        Security Architecture for the Internet Protocol
-2411        IP Security Document Roadmap
- -

Basic protocols

-
2402        IP Authentication Header
-2406        IP Encapsulating Security Payload (ESP)
- -

Key management

-
2367        PF_KEY Key Management API, Version 2
-2407        The Internet IP Security Domain of Interpretation for ISAKMP
-2408        Internet Security Association and Key Management Protocol (ISAKMP)
-2409        The Internet Key Exchange (IKE)
-2412        The OAKLEY Key Determination Protocol
-2528        Internet X.509 Public Key Infrastructure
- -

Details of various things used

-
2085        HMAC-MD5 IP Authentication with Replay Prevention
-2104        HMAC: Keyed-Hashing for Message Authentication
-2202        Test Cases for HMAC-MD5 and HMAC-SHA-1
-2207        RSVP Extensions for IPSEC Data Flows
-2403        The Use of HMAC-MD5-96 within ESP and AH
-2404        The Use of HMAC-SHA-1-96 within ESP and AH
-2405        The ESP DES-CBC Cipher Algorithm With Explicit IV
-2410        The NULL Encryption Algorithm and Its Use With IPsec
-2451        The ESP CBC-Mode Cipher Algorithms
-2521        ICMP Security Failures Messages
- -

Older RFCs which may be referenced

-
1321        The MD5 Message-Digest Algorithm
-1828        IP Authentication using Keyed MD5
-1829        The ESP DES-CBC Transform
-1851        The ESP Triple DES Transform
-1852        IP Authentication using Keyed SHA
- -

RFCs for secure DNS service, which IPsec may -use

-
2137        Secure Domain Name System Dynamic Update
-2230        Key Exchange Delegation Record for the DNS
-2535        Domain Name System Security Extensions
-2536        DSA KEYs and SIGs in the Domain Name System (DNS)
-2537        RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)
-2538        Storing Certificates in the Domain Name System (DNS)
-2539        Storage of Diffie-Hellman Keys in the Domain Name System (DNS)
- -

RFCs labelled "experimental"

-
2521        ICMP Security Failures Messages
-2522        Photuris: Session-Key Management Protocol
-2523        Photuris: Extended Schemes and Attributes
- -

Related RFCs

-
1750        Randomness Recommendations for Security
-1918        Address Allocation for Private Internets
-1984        IAB and IESG Statement on Cryptographic Technology and the Internet
-2144        The CAST-128 Encryption Algorithm
- - -- cgit v1.2.3