RFC 9838: Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)

This document presents an extension to the Internet Key Exchange Protocol Version 2 (IKEv2) for the purpose of group key management. The protocol is in…

Read RFC 9838 on the RFC Editor

Outgoing relationships (38 related RFCs)

Obsoletes, Informative reference — RFC 6407: The Group Domain of Interpretation
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Normative reference — RFC 4301: Security Architecture for the Internet Protocol
Normative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Normative reference — RFC 4302: IP Authentication Header
Normative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Normative reference — RFC 7427: Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
Normative reference — RFC 6054: Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic
Normative reference — RFC 9827: Renaming the Extended Sequence Numbers (ESN) Transform Type in the Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 2409: The Internet Key Exchange (IKE)
Informative reference — RFC 4106: The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 3686: Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 3948: UDP Encapsulation of IPsec ESP Packets
Informative reference — RFC 3740: The Multicast Group Security Architecture
Informative reference — RFC 4309: Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP)
Informative reference — RFC 4543: The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH
Informative reference — RFC 5649: Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm
Informative reference — RFC 5723: Internet Key Exchange Protocol Version 2 (IKEv2) Session Resumption
Informative reference — RFC 5374: Multicast Extensions to the Security Architecture for the Internet Protocol
Informative reference — RFC 7383: Internet Key Exchange Protocol Version 2 (IKEv2) Message Fragmentation
Informative reference — RFC 2627: Key Management for Multicast: Issues and Architectures
Informative reference — RFC 4046: Multicast Security (MSEC) Group Key Management Architecture
Informative reference — RFC 5685: Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 6467: Secure Password Framework for Internet Key Exchange Version 2 (IKEv2)
Informative reference — RFC 8784: Mixing Preshared Keys in the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-quantum Security
Informative reference — RFC 9242: Intermediate Exchange in the Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 9370: Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
Informative reference — RFC 5998: An Extension for EAP-Only Authentication in IKEv2
Informative reference — RFC 7634: ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsec
Informative reference — RFC 8750: Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP)
Informative reference — RFC 8052: Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services
Informative reference — RFC 9347: Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS)
Informative reference — RFC 8263: Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message
Informative reference — RFC 9867: Mixing Preshared Keys in the IKE_INTERMEDIATE and CREATE_CHILD_SA Exchanges of the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-Quantum Security

Incoming relationships (2 related RFCs)

Informatively referenced by — RFC 9827: Renaming the Extended Sequence Numbers (ESN) Transform Type in the Internet Key Exchange Protocol Version 2 (IKEv2)
Informatively referenced by — RFC 9867: Mixing Preshared Keys in the IKE_INTERMEDIATE and CREATE_CHILD_SA Exchanges of the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-Quantum Security