Collaborate Disseminate
Implementations of the IKEv2 protocol are vulnerable to network amplification attacks. Continue reading VU#419128: IKE/IKEv2 protocol implementations may allow network amplification attacks
By Bill Brenner, Akamai SIRT senior tech writer Akamai’s Security Intelligence Research Team (SIRT) is conducting research into the security posture of the Internet Key Exchange (IKE & IKEv2) protocol. The paper outlines the findings thus far, including configurations in… Continue reading IKE/IKEv2 Ripe for DDoS Abuse
IPsec is a framework protocol that consists of the sub-protocols ESP and AH. IPsec, inately, doesn’t include a Key Exchange mechanism, and is therefore dependent on manually setting Keys (archaic), or using IKEv1 or IKEv2 to securely esta… Continue reading How does IPsec turn KEYMAT into Encryption and Authentication Keys?
When dealing with IPSec based VPNs, I understand that there is a slight “problem” with symmetric key exchange. Obviously, you can’t send the keys over the VPN, since they are used to guarantee the confidentiality of the information also se… Continue reading IPSec VPNs and symmetric keys