The purpose of this new exchange is to allow support of all authentication methods with fixed and non-fixed IP addresses, while offering protection against a denial of service attack aimed at costly operations. The exchange consists of only four messages and therefor is useful when performance is crucial. It does not define MIBs that may be used for configuring IPsec implementations or for providing low-level diagnostic or debugging information. Further, it does not provide policy information. This document defines three methods how to negotiate the new HASH method.
All methods tries to be backward compatible as much as possible.
Only one of those methods must be selected by the working group and all the other should be removed from this document. A method for negotiating the heartbeat parameters is also provided. This Internet Draft specifies the use of each of the 5 AES finalist candidates in the ESP Header. Once the AES cipher is chosen, this document will be changed to reflect that choice.