Hi, FYI, 3GPP recently updated its IKEv2 profile. The current profiles for IKEv2 and ESP looks like this (only the relevant part of 3GPP TS 33.210 and TS 33.310):
https://www.scribd.com/document/332057984/3GPP-IPsec-Profile-Nov-2016 Main changes are: - SHA-1 signatures of all kinds are forbidden. - Digital Signatures and Hash Algorithm Notification [RFC7427] are mandatory to support. Comments of any kind from the IPSECME WG are very welcome. I will drive another update of the 3GPP profiles as soon as 4307bis and 7321bis are published. Cheers, John _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
