IPsec
Sign in to saveIn computing, Internet Protocol Security (IPsec) is a secure network protocol suite that authenticates and encrypts packets of data to provide secure encrypted communication between two computers over an Internet Protocol network. It is used in virtual private networks (VPNs).
Key facts
- Technology standard.title
- IPsec
- Technology standard.long_name
- Internet Protocol Security
- Technology standard.year_started
- 1996
- Technology standard.organization
- Internet Engineering Task Force
- Technology standard.base_standards
- Various, see IETF documentation chapter
via Wikipedia infobox
Article
25 sectionsContents
- History
- Security architecture
- Authentication Header
- Encapsulating Security Payload
- Security association
- Keepalives
- Modes of operation
- Transport mode
- Tunnel mode
- Algorithms
- Symmetric encryption algorithms
- Key exchange algorithms
- Authentication algorithms
- Implementations
- Standards status
- Alleged NSA interference
- See also
- References
- Further reading
- Standards track
- Experimental RFCs
- Informational RFCs
- Best current practice RFCs
- Obsolete/historic RFCs
- External links
In computing, Internet Protocol Security (IPsec) is a secure network protocol suite that authenticates and encrypts packets of data to provide secure encrypted communication between two computers over an Internet Protocol network. It is used in virtual private networks (VPNs).
IPsec includes protocols for establishing mutual authentication between agents at the beginning of a session and negotiation of cryptographic keys to use during the session. IPsec can protect data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec uses cryptographic security services to protect communications over Internet Protocol (IP) networks. It supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection from replay attacks.