pre-shared key AND D-H

Dear Gents,

 

I was going through INE Sec Videos and found that during IKE Phase 1 peers agrees on following parameters.

 

Authentication Methos (Preshared Keys).

D-H Group(Encrypting/Decrypting Keys ).

 

I can not understand that how we are using Symmitric Crypto(PSK) and Asymmirtric Crypto(D-H) at the same time..?

Are they doing different jobs at different instance...?

 

Appreciate for your support.

 

Regards

Jawwad

 

Comments







  • Dear Jawwad,

    Please note that pre-shared key is used to authenticate and validate the peers. However, DH group is used to create a key that will encrypt the session between
    both peers.

    HTH.

     

    Best Regards,

    Moustafa Houssami

     

    From: [email protected] [mailto:[email protected]]
    On Behalf Of contactjawwad

    Sent: Monday, June 30, 2014 9:28 AM

    To: Moustafa Houssami

    Subject: [CCIE Sec] pre-shared key AND D-H

     

    Dear Gents,

     

    I was going through INE Sec Videos and found that during IKE Phase 1 peers agrees on following parameters.

     

    Authentication Methos (Preshared Keys).

    D-H Group(Encrypting/Decrypting Keys ).

     

    I can not understand that how we are using Symmitric Crypto(PSK) and Asymmirtric Crypto(D-H) at the same time..?

    Are they doing different jobs at different instance...?

     

    Appreciate for your support.

     

    Regards

    Jawwad

     







    INE - The Industry Leader in CCIE Preparation

    http://www.INE.com



    Subscription information may be found at:

    http://www.ieoc.com/forums/ForumSubscriptions.aspx








    CONFIDENTIALITY NOTICE: This transmission contains confidential information. The information is intended only for the use of the recipient named above. If you have received this e-mail in error, please immediately notify us by telephone to arrange for return
    of the confidential information to us. You are hereby notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this information is strictly prohibited.



    Save a tree... please don't print this e-mail unless you really need to.



Sign In or Register to comment.