A DH-less encryption mode for IKE

Document Type Expired Internet-Draft (ipsec WG)
Authors Hugo Krawczyk  , Pau-Chen Cheng  , Ran Canetti 
Last updated 1998-07-06
Stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Expired & archived
plain text pdf htmlized bibtex
Stream WG state WG Document
Document shepherd No shepherd assigned
IESG IESG state Expired
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This draft describes a ``DH-less'' version of the (revised) public-key encryption mode of [HC98]. This saves the DH exponentiation, which may be significant (especially on low-end machines and busy servers). The proposed mode is VERY similar to the existing modes and requires only minimal modifications. In particular, it is straightforward to implement as an addition to the existing modes.


Hugo Krawczyk (hugo@ee.technion.ac.il)
Pau-Chen Cheng (pau@watson.ibm.com)
Ran Canetti (canetti@watson.ibm.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)