Internet Key Exchange

Common card · No. 404149

In computing, Internet Key Exchange (IKE, versioned as IKEv1 and IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol suite. IKE builds upon the Oakley protocol and ISAKMP. IKE uses X.509 certificates for authentication ‒ either pre-shared or distributed using DNS (preferably with DNSSEC) ‒ and a Diffie–Hellman key exchange to set up a shared session secret from which cryptographic keys are derived. A IETF draft is currently being written to provide a quantum-resistant key establishment using ML-KEM. In addition, a security policy for every peer which will connect must be manually maintained.

Read on Wikipedia