RFC 6407: The Group Domain of Interpretation

This document describes the Group Domain of Interpretation (GDOI) protocol specified in RFC 3547. The GDOI provides group key management to support secure…

Read RFC 6407 on the RFC Editor

Outgoing relationships (30 related RFCs)

Obsoletes, Informative reference — RFC 3547: The Group Domain of Interpretation
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Normative reference — RFC 4302: IP Authentication Header
Normative reference — RFC 2409: The Internet Key Exchange (IKE)
Normative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Normative reference — RFC 2407: The Internet IP Security Domain of Interpretation for ISAKMP
Normative reference — RFC 2408: Internet Security Association and Key Management Protocol (ISAKMP)
Normative reference — RFC 2404: The Use of HMAC-SHA-1-96 within ESP and AH
Normative reference — RFC 4868: Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec
Normative reference — RFC 2403: The Use of HMAC-MD5-96 within ESP and AH
Normative reference — RFC 5374: Multicast Extensions to the Security Architecture for the Internet Protocol
Normative reference — RFC 2627: Key Management for Multicast: Issues and Architectures
Normative reference — RFC 4754: IKE and IKEv2 Authentication Using the Elliptic Curve Digital Signature Algorithm (ECDSA)
Normative reference — RFC 5903: Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2
Normative reference — RFC 6054: Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 5905: Network Time Protocol Version 4: Protocol and Algorithms Specification
Informative reference — RFC 4306: Internet Key Exchange (IKEv2) Protocol
Informative reference — RFC 5996: Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 4106: The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 3686: Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 3740: The Multicast Group Security Architecture
Informative reference — RFC 4309: Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 3947: Negotiation of NAT-Traversal in the IKE
Informative reference — RFC 4543: The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH
Informative reference — RFC 4082: Timed Efficient Stream Loss-Tolerant Authentication (TESLA): Multicast Source Authentication Transform Introduction
Informative reference — RFC 4046: Multicast Security (MSEC) Group Key Management Architecture
Informative reference — RFC 4359: The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH)

Incoming relationships (11 related RFCs)

Obsoleted by, Informatively referenced by — RFC 9838: Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 8754: IPv6 Segment Routing Header (SRH)
Normatively referenced by — RFC 8750: Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP)
Normatively referenced by — RFC 8052: Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services
Normatively referenced by — RFC 8263: Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message
Informatively referenced by — RFC 6518: Keying and Authentication for Routing Protocols (KARP) Design Guidelines
Informatively referenced by — RFC 8799: Limited Domains and Internet Protocols
Informatively referenced by — RFC 8994: An Autonomic Control Plane (ACP)
Informatively referenced by — RFC 6411: Applicability of Keying Methods for RSVP Security
Informatively referenced by — RFC 7645: The Keying and Authentication for Routing Protocol (KARP) IS-IS Security Analysis
Informatively referenced by — RFC 9395: Deprecation of the Internet Key Exchange Version 1 (IKEv1) Protocol and Obsoleted Algorithms