Hi,
We've updated the optimized rekey draft. The new version has two changes:
1. Rekeying the initial Child SA has been separated to a dedicated section 5.1.
The current solution relies on draft-pwouters-ipsecme-child-pfs-info to
negotiate the KE method(s) for the initial Child SA in the IKE_AUTH exchange,
and to use the optimized rekey when first time rekeying the initial Child SA.
Otherwise, the regular rekey should be used for the first rekey.
2. Add considerations about the interaction with
draft-ietf-ipsecme-ikev2-qr-alt.
Comments and review are welcome.
Regards & Thanks！
Wei PAN (潘伟)
-----Original Message-----
From: internet-dra...@ietf.org <internet-dra...@ietf.org>
Sent: Monday, July 7, 2025 10:52 PM
To: i-d-annou...@ietf.org
Cc: ipsec@ietf.org
Subject: I-D Action: draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-05.txt
Internet-Draft draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-05.txt is now
available. It is a work item of the IP Security Maintenance and Extensions
(IPSECME) WG of the IETF.
Title: Optimized Rekeys in the Internet Key Exchange Protocol Version 2
(IKEv2)
Authors: Sandeep Kampati
Wei Pan
Paul Wouters
Meduri S S Bharath
Meiling Chen
Valery Smyslov
Name: draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-05.txt
Pages: 12
Dates: 2025-07-07
Abstract:
This document describes a method for reducing the size of the
Internet Key Exchange version 2 (IKEv2) CREATE_CHILD_SA exchanges
used for rekeying of the IKE or Child SA by replacing the SA and TS
payloads with a Notify Message payload. Reducing size and complexity
of IKEv2 exchanges is especially useful for low power consumption
battery powered devices.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-05.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-ipsecme-ikev2-sa-ts-payloads-opt-05
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
I-D-Announce mailing list -- i-d-annou...@ietf.org To unsubscribe send an email
to i-d-announce-le...@ietf.org
_______________________________________________
IPsec mailing list -- ipsec@ietf.org
To unsubscribe send an email to ipsec-le...@ietf.org
