ISAKMP is a generic key management and security association creation protocol for use in TCP/IP networks. IKE is an implementation of ISAKMP used for IPSEC key management. This test suite can be used to test ISAKMP client (initiator) implementations for security flaws and robustness problems.
Used specifications
Specification
Title
RFC2407
The Internet IP Security Domain of Interpretation for ISAKMP
RFC2408
Internet Security Association and Key Management Protocol
RFC2409
Internet Key Exchange
RFC2857
The Use of HMAC-RIPEMD-160-96 within ESP and AH
RFC3051
IP Payload Compression Using ITU-T V.44 Packet Method
RFC3526
More Modular Exponential Diffie-Hellman Groups for IKE
RFC3547
The Group Domain of Interpretation
RFC3554
On the Use of Stream Control Transmission Protocol (SCTP) with IPsec
RFC3566
The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec
RFC3602
The AES-CBC Cipher Algorithm and Its Use with IPsec
RFC3686
Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP)
RFC3706
A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers
RFC3947
Negotiation of NAT Traversal in IKE
RFC4106
The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP)
RFC4196
The SEED Cipher Algorithm and Its Use with IPsec
RFC4304
Extended Sequence Number (ESN) Addendum to IPsec Domain of Interpretation (DOI) for Internet Security Association and Key Management Protocol (ISAKMP)
RFC4312
The Camellia Cipher Algorithm and Its Use With IPsec
RFC4359
The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH)
RFC4705
GigaBeam High-Speed Radio Link Encryption
RFC4868
Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec
RFC5114
Additional Diffie-Hellman Groups for Use with IETF Standards