摘要： 介绍了IKE的协商过程，并对其进行了分析，然后提出了对相关方面的建议和改进，其中包括：对cookies的建议，签名验证主模式的改进，签名验证积极模式的改进及预共享方式的改进。通过改进，协议会更加安全、实用。
关键词:
密钥交换,
虚拟专用网,
IPSec,
完美向前保密
Abstract: The paper introduces and analyses the negotiation procedure of IKE, and then some suggestions for modificating relevant aspects are presented, including the suggestion for cookies, the improvement in main mode and aggressive mode which are authenticated with signatures and the improvement in the authentication with a pre-shared key. The protocol can be more practical and securer by modification.
中图分类号:
于佳,李大兴. 对于IKE的分析及改进[J]. , 2003, 29(01): 167-169.
YU Jia ，LI Daxing. Analysis and Improvement of Internet Key Exchange[J]. , 2003, 29(01): 167-169.