The improving of initial exchanges in IKEv2

Abstract

This paper proposed an approach to provide an efficient authentication and key agreement in IKEv2. We used Elliptic Curve Cryptography Diffie-Hellman (ECDH) to exchange keys between two communicating parties during IKE negotiation. Also we designed and implemented ECC X.509v3 certificate for identity authentication. The results of performance comparisons show that the proposed method provides greater security using fewer key sizes, and improves the execution efficiency of the initial exchanges in IKEv2. © 2011 Springer-Verlag Berlin Heidelberg.