A Cryptographic Evaluation of IPsec

N. Ferguson and B. Schneier

December 2003

ABSTRACT: We perform a cryptographic review of the IPsec protocol, as described in the November 1998 RFCs. Even though the protocol is a disappointment--our primary complaint is with its complexity--it is the best IP security protocol available at the moment.

[full text - PDF (Acrobat)] [full text - Postscript]

Schneier.com is a personal website. Opinions expressed are not necessarily those of BT.