Comparative evaluation of successor protocols to Internet key exchange (IKE)

IP security (IPSec) is a suite of protocols that integrate security into IP and provide services that are data source authentication, data integrity, confidentiality, protection against replay attack, data privacy, access control, and end-to-end security for IP packets. In order to realize security services is to be established shared key between source and destination. Internet key exchange (IKE) provides this requirement. IKE manages keys securely after source and destination have agreed upon and it exchanges the keys in an authenticated way. IKE has some deficiencies. To solve these problems, some successors have been presented for IKE including IKEv2, SIGMA, and JFK. In this paper, at first it is introduced the original version of IKE and its successors. Then these protocols are comparatively evaluated.