%% You should probably cite rfc7427 instead of this I-D. @techreport{kivinen-ipsecme-signature-auth-07, number = {draft-kivinen-ipsecme-signature-auth-07}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-kivinen-ipsecme-signature-auth/07/}, author = {Tero Kivinen and Joel Snyder}, title = {{Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)}}, pagetotal = 18, year = 2014, month = jul, day = 21, abstract = {The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.}, }