参考标准和协议-凯发k8国际娱乐官网入口

与vpn相关的参考标准与协议如下：

• rfc 2403: the use of hmac-md5-96 within esp and ah
• rfc 2404: the use of hmac-sha-1-96 within esp and ah
• rfc 2409: the internet key exchange (ike)
• rfc 2451: the esp cbc-mode cipher algorithms
• rfc 3526: more modular exponential (modp) diffie-hellman groups for internet key exchange (ike)
• rfc 3566: the aes-xcbc-mac-96 algorithm and its use with ipsec
• rfc 3602: the aes-cbc cipher algorithm and its use with ipsec
• rfc 3664: the aes-xcbc-prf-128 algorithm for the internet key exchange protocol (ike)
• rfc 4106: the use of galois/counter mode (gcm) in ipsec encapsulating security payload (esp)
• rfc 4109: algorithms for internet key exchange version 1 (ikev1)
• rfc 4434: the aes-xcbc-prf-128 algorithm for the internet key exchange protocol (ike)
• rfc 4868: using hmac-sha-256, hmac-sha-384, and hmac-sha-512 with ipsec
• rfc 4301: security architecture for the internet protocol
• rfc 4302: ip authentication header
• rfc 4303: ip encapsulating security payload (esp)
• rfc 4305: cryptographic algorithm implementation requirements for encapsulating security payload (esp) and authentication header (ah)
• rfc 4306: internet key exchange (ikev2)protocol
• rfc 4307: cryptographic algorithms for use in the internet key exchange version 2 (ikev2)
• rfc 4308: cryptographic suites for ipsec
• rfc 5282: using authenticated encryption algorithms with the encrypted payload of the internet key exchange version 2 (ikev2) protocol
• rfc 6989: additional diffie-hellman tests for the internet key exchange protocol version 2 (ikev2)
• rfc 7296: internet key exchange protocol version 2 (ikev2)
• rfc 7321: cryptographic algorithm implementation requirements and usage guidance for encapsulating security payload (esp) and authentication header (ah)
• rfc 8247: algorithm implementation requirements and usage guidance for the internet key exchange protocol version 2 (ikev2)
• rfc 3947: negotiation of nat-traversal in the ike
• rfc 3948: udp encapsulation of ipsec esp packets
• rfc 3706: a traffic-based method of detecting dead internet key exchange (ike) peers
• rfc 4271: a border gateway protocol 4 (bgp-4)