…attacks, such as OAKLEY [ RFC2412 ] and the Internet Key Exchange [ RFC2409 ] [ RFC4306 ] [ RFC5996 ]. When the cofactor of a group is not equal to 1, there are a number of attacks that are possible against ECDH. See [ VW1996 ], [ AV1996 ], and [ LL1997 ]. 10.3 . Group Representa…

…tive attacks, such as OAKLEY [RFC2412] and the Internet Key Exchange [RFC2409] [RFC4306] [RFC5996]. When the cofactor of a group is not equal to 1, there are a number of attacks that are possible against ECDH. See [VW1996], [AV1996], and [LL1997]. 10.3. Group Representation and S…

…identiality is provided, the Internet Key Exchange Protocol version 2 (IKEv2) [ RFC4306 ] SHOULD be used for key management. Operators should consult [ RFC4301 ] for more information on the security services available at and immediately above the Internet Protocol layer. 11.2.4 .…

…say: ENCR_NULL 11 [RFC2410] MUST NOT Notes: ENCR_NULL is MUST NOT for IKEv2, as RFC4306 specifies that ENCR_NULL MUST NOT be used as IKE encryption algorithm (RFC4306 section 5). RFC 4308 , "Cryptographic Suites for IPsec", December 2005 Source of RFC : ipsec (sec) Errata ID: 109…

…say: ENCR_NULL 11 [RFC2410] MUST NOT Notes: ENCR_NULL is MUST NOT for IKEv2, as RFC4306 specifies that ENCR_NULL MUST NOT be used as IKE encryption algorithm (RFC4306 section 5). RFC 4308 , "Cryptographic Suites for IPsec", December 2005 Source of RFC : ipsec (sec) Errata ID: 109…