Security Analysis Of Internet Key Exchange Protocol

This article thoroughly discussed the Internet Key Exchange Protocol (IKE Protocol) of the IPSEC protocol bunch on security, implementation and other various issues. We first introduced the IKE protocol standard issued by the IETF IP Security Work Group, then we analyzed the security and efficiency problems which possibly meets in the real implementation of the protocol based on the standard and pointed out certain flaws and insufficiency of the protocol standard. We also proposed two sets of revision plan in view of the existing protocol standard, after we synthetically considered various aspects of the protocol. The first one is based on the digital signature authentication while the second one is based on the public key encryption authentication. These two sets of revision plan laid proper attention to both the security and the efficiency as well as the implementation matters of the protocol, and provided us with the function of adjustment of the security attributes and intensity according to its own network environment and service characteristic while doing the real implementation of the protocol. Finally, we carried out the theoretically logical proof of the security of the revised protocol, using the formal logic analysis method.