[IPsec] I-D Action: draft-ietf-ipsecme-ikev2-downgrade-prevention-07.txt

internet-drafts@ietf.org Wed, 24 June 2026 13:19 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178230715948.1332401.11634402619811820456@dt-datatracker-f9b87776f-xzl65>
Date: Wed, 24 Jun 2026 06:19:19 -0700
Message-ID-Hash: 45SSLAJFQPTVYYDLWXQGIBDGADN4YEF5
CC: ipsec@ietf.org
Reply-To: ipsec@ietf.org
Subject: [IPsec] I-D Action: draft-ietf-ipsecme-ikev2-downgrade-prevention-07.txt
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/W03hcwB_SPl60rCeYEKeqMMWpUE>

Internet-Draft draft-ietf-ipsecme-ikev2-downgrade-prevention-07.txt is now
available. It is a work item of the IP Security Maintenance and Extensions
(IPSECME) WG of the IETF.

   Title:   Downgrade Prevention for the Internet Key Exchange Protocol Version 2 (IKEv2)
   Authors: Valery Smyslov
            Christopher Patton
   Name:    draft-ietf-ipsecme-ikev2-downgrade-prevention-07.txt
   Pages:   14
   Dates:   2026-06-24

Abstract:

   This document describes an extension to the Internet Key Exchange
   protocol version 2 (IKEv2) in which the peers authenticate the full
   IKE_SA_INIT transcript.  When both peers implement the extension and
   at least one relevant authentication credential is not compromised,
   this prevents certain downgrade attacks on IKEv2.

   This document updates RFC 7296.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-downgrade-prevention/

There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-downgrade-prevention-07

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-ipsecme-ikev2-downgrade-prevention-07

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

[IPsec] Re: I-D Action: draft-ietf-ipsecme-ikev2-… Valery Smyslov
[IPsec] I-D Action: draft-ietf-ipsecme-ikev2-down… internet-drafts