| Internet Key Exchange (IKE) is an IP Security (IPsec) protocol that is used for establishing security associations and key negotiations between two hosts over insecure medium. In this report, first the different implementations of IKE protocols that are widely used in wired networks are examined, focusing on their security flaws when considered for use in wireless and Mobile IP networks. Then a variant of IKE protocol that is deployable in wireless and mobile networks is presented. The proposed protocol is based on pre-shared key authentication during IKE Phase 1. The advantages of the proposed approach over existing solutions, which include identity protection, scalability, low overhead costs, and less susceptible to passive dictionary based attacks, are illustrated. The detailed design, implementation, and testing of proposed solution are also presented. The various test tools, test setups, and test utilities used in demonstrating existing flaws and implementing proposed solution are explained in detail. |
