RFC 4106: The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)

This memo describes the use of the Advanced Encryption Standard (AES) in Galois/Counter Mode (GCM) as an IPsec Encapsulating Security Payload (ESP) mechanism…

Read RFC 4106 on the RFC Editor

Outgoing relationships (6 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 2406: IP Encapsulating Security Payload (ESP)
Normative reference — RFC 2407: The Internet IP Security Domain of Interpretation for ISAKMP
Normative reference — RFC 3602: The AES-CBC Cipher Algorithm and Its Use with IPsec
Informative reference — RFC 2409: The Internet Key Exchange (IKE)
Informative reference — RFC 3686: Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)

Incoming relationships (24 related RFCs)

Normatively referenced by — RFC 5920: Security Framework for MPLS and GMPLS Networks
Normatively referenced by — RFC 5282: Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) Protocol
Normatively referenced by — RFC 6257: Bundle Security Protocol Specification
Normatively referenced by — RFC 7143: Internet Small Computer System Interface (iSCSI) Protocol (Consolidated)
Normatively referenced by — RFC 8247: Algorithm Implementation Requirements and Usage Guidance for the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 7146: Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3
Normatively referenced by — RFC 8750: Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP)
Normatively referenced by — RFC 4869: Suite B Cryptographic Suites for IPsec
Normatively referenced by — RFC 7402: Using the Encapsulating Security Payload (ESP) Transport Format with the Host Identity Protocol (HIP)
Informatively referenced by — RFC 5116: An Interface and Algorithms for Authenticated Encryption
Informatively referenced by — RFC 5288: AES Galois Counter Mode (GCM) Cipher Suites for TLS
Informatively referenced by — RFC 4543: The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH
Informatively referenced by — RFC 6407: The Group Domain of Interpretation
Informatively referenced by — RFC 4835: Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH)
Informatively referenced by — RFC 4359: The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH)
Informatively referenced by — RFC 8221: Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH)
Informatively referenced by — RFC 6071: IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap
Informatively referenced by — RFC 6054: Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic
Informatively referenced by — RFC 7634: ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsec
Informatively referenced by — RFC 6027: IPsec Cluster Problem Statement
Informatively referenced by — RFC 6311: Protocol Support for High Availability of IKEv2/IPsec
Informatively referenced by — RFC 9838: Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
Informatively referenced by — RFC 4705: GigaBeam High-Speed Radio Link Encryption
Informatively referenced by — RFC 9227: Using GOST Ciphers in the Encapsulating Security Payload (ESP) and Internet Key Exchange Version 2 (IKEv2) Protocols