Subject: [IPsec] Updated 3GPP Profile for IKEv2

From: John Mattsson <[email-masked]>
Date: Wed, 23 Nov 2016 13:23:48 +0000

Hi,

FYI, 3GPP recently updated its IKEv2 profile. The current profiles for
IKEv2 and ESP looks like this (only the relevant part of 3GPP TS 33.210
and TS 33.310):

https://www.scribd.com/document/332057984/3GPP-IPsec-Profile-Nov-2016

Main changes are:

- SHA-1 signatures of all kinds are forbidden.
- Digital Signatures and Hash Algorithm Notification [RFC7427] are
mandatory to support.

Comments of any kind from the IPSECME WG are very welcome.

I will drive another update of the 3GPP profiles as soon as 4307bis and
7321bis are published.

Cheers,
John