Subject: [Ipsec] each side uses different authentication method?

From: " 杜春燕(DU Chun-yan)" <[email-masked]>
Date: Wed, 1 Mar 2006 09:45:44 +0800

Hi,

In section 2.15 of RFC4306，"There is no requirment that the initiator and responder sign with the same cryptographic algorithms.""In particular, the initiator may be using a shared key while the responder may have a public signature key and certificate."
How could it be possible?  Does it mean that each side firstly uses the share secret key and then uses signature method, namely doing authentication twice to complete IKE_AUTH exchange?
Thanks for help.   

　　　　　　　　DU Chun-yan
　　　　　　　　[email-masked]
　　　　　　　　　　2006-02-28
_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec