Book details of 'Big Book of IPsec RFCs: Internet Security Architecture'

Title	Big Book of IPsec RFCs: Internet Security Architecture
Author(s)	Peter Loshin, Pete Loshin
ISBN	0124558399
Language	English
Publisher	Morgan Kaufmann

---

Back to shelf Computer networks
Back to shelf Computer programming
Amazon.com info for Big Book of IPsec RFCs: Internet Security Architecture

Score:

Vote for this book

The Virtual Bookcase Reviews of 'Big Book of IPsec RFCs: Internet Security Architecture':

Reviewer Rob Slade wrote:
RFC (Request For Comments) documents are the standard references of the Internet. (Not that all of them are standards as such: some are discussion papers or even opinion pieces. RFC 1796 has an interesting take on this fact.) IPsec is that group of articles dealing with security. The RFCs are important materials. They are also available online, for free. Why, then, would you pay for a collection of them? Fortunately for the ease of my review, Loshin asks this question, and gives a detailed answer, in the introduction. In the first place, you'll probably want to print out the documents at some time, and this is probably one of the cheapest ways to do it. (Certainly one of the most convenient.) Also, this is a collection of the IPsec standards, and therefore the compilation work has been done for you. Finally, Loshin has provided an extensive index, which greatly increases the value of the text. (Original formatting has been retained, and the individual manuscripts preserve their page numbering: the index can be used to point to items in the RFCs even for those referring to the online forms.) Twenty three RFCs are included in the book. Fortunately for Loshin's effort, one of the documents provides an overview of net security and another presents a structure for the RFCs themselves. Each contains its own definitions of terminology, although an aggregated glossary would have been helpful. The items are listed in numerical order, as is suitable for a reference work: RFC 2401, on security architecture, is possibly the best starting point for newcomers, but is roughly in the middle of the book, and RFC 2411, describing the relationships among the RFCs, comes near the end. Topics include the MD4 and MD5 digest algorithms, using MD5 for IP authentication, ESP (Encapsulating Security Payload) encryption, RC5 encryption, hashed message authentication code (HMAC), the CAST-128 algorithm, test cases for message digests, RC2 encryption, security architecture, the authentication header, Internet Security Association and Key Management Protocol (ISAKMP), security associations, Internet Key Exchange (IKE), NULL encryption, a document roadmap, OAKLEY key determination, and the Diffie-Hellman key agreement method. For those needing, or even wanting, to know about IPsec, this is the reference. copyright Robert M. Slade, 2000
Add my review for Big Book of IPsec RFCs: Internet Security Architecture

Book description:

The Security Architecture for the Internet Protocol, IPsec, is already defining the way organizations and individuals secure their networks. There is no single document that describes IPsec, but rather an entire body of work, the Requests for Comments (RFC's). This book compiles and organizes these important documents in a single printed volume, and adds a glossary and extensive index. This means you no longer have to wade through countless RFC's trying to find the answer to your IPsec question - all solutions are compiled in a single book, with an index that makes them even easier to locate. Every RFC describing an aspect of the IPsec standard is included here, as are descriptions of most of the cryptographic algorithms used in IPsec. If you buy one IPsec reference, this is the one to choose. Written by members of the IPsec Working Group and other Internet Engineering Task Force (IETF) members, this is the most authoritative IPsec text available. Topics covered in this volume include: Security Architecture for the Internet Protocol (IPsec) The IP Encapsulating Security Payload (ESP) The IP Authentication Header (AH) The Internet Key Exchange (IKE) Protocol The OAKLEY Key Determination Protocol The Internet Security Association and Key Management Protocol (ISAKMP) Algorithm descriptions for MD4, MD5, RC5, RC2, CAST, DES, Diffie-Hellman TOC: RFC 1320 The MD4 Message-Digest Algorithm RFC 1321 The MD5 Message-Digest Algorithm RFC 1828 IP Authentication using Keyed MD5 RFC 1829 The ESP DES-CBC Transform RFC 2040 The RC5, RC5-CBC, RC5-CBC-Pad, and RC5-CTS Algorithms RFC 2085 HMAC-MD5 IP Authentication with Replay Prevention RFC 2104 HMAC: Keyed-Hashing for Message Authentication RFC 2144 The CAST-128 Encryption Algorithm RFC 2202 Test Cases for HMAC-MD5 and HMAC-SHA-1 RFC 2268 A Description of the RC2(r) Encryption Algorithm RFC 2401 Security Architecture for the Internet Protocol RFC 2402 IP Authentication Header RFC 2403 The Use of HMAC-MD5-96 within ESP and AH RFC 2404 The Use of HMAC-SHA-1-96 within ESP and AH RFC 2405 The ESP DES-CBC Cipher Algorithm With Explicit IV RFC 2406 IP Encapsulating Security Payload (ESP) RFC 2407 The Internet IP Security Domain of Interpretation for ISAKMP RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP) RFC 2409 The Internet Key Exchange (IKE) RFC 2410 The NULL Encryption Algorithm and Its Use With IPsec RFC 2411 IP Security Document Roadmap RFC 2412 The OAKLEY Key Determination Protocol RFC 2451 The ESP CBC-Mode Cipher Algorithms RFC 2631 Diffie-Hellman Key Agreement Method