U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

NIST SP 800-77 Rev. 1 (Initial Public Draft)

Guide to IPsec VPNs

Date Published: July 2019
Comments Due: October 8, 2019 (public comment period is CLOSED)
Email Questions to: revision_of_SP800-77@nist.gov

Author(s)

Elaine Barker (NIST), Quynh Dang (NIST), Sheila Frankel (NIST), Karen Scarfone (Scarfone Cybersecurity), Paul Wouters (No Hats Corporation)

Announcement

Internet Protocol Security (IPsec) is a network layer security control used to protect communications over public networks, encrypt IP traffic between hosts, and create virtual private networks (VPNs). A VPN provides a secure communication mechanism for data and control information between computers or networks, and the Internet Key Exchange (IKE) protocol is most commonly used to establish IPsec-based VPNs.

NIST invites comments on Draft Special Publication (SP) 800-77 Revision 1, Guide to IPsec VPNs, which contains practical recommendations for implementing security services based on IPsec and IKE to assist organizations in mitigating the risks associated with transmitting sensitive information across networks. Since the original publication of SP 800-77 in 2005, IPsec and IKE protocols have been enhanced, and much operational experience has been gained from the security solutions deployed. This revision contains new security and cryptographic recommendations and requirements with a focus on how IPsec provides network layer security services. The document also describes how organizations can implement IPsec, IKE, and their alternatives under varying circumstances.

NOTE: A call for patent claims is included on page iv of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.

Abstract

Keywords

communications security; Internet Key Exchange (IKE); Internet Protocol (IP); Internet Protocol Security (IPsec); network layer security; networking; virtual private network (VPN)
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-77r1-draft
Download URL

Supplemental Material:
None available

Document History:
07/02/19: SP 800-77 Rev. 1 (Draft)
06/30/20: SP 800-77 Rev. 1 (Final)

Topics

Security and Privacy

digital signatures, encryption, key management, message authentication

Technologies

networks