@misc{rfc7427, series = {Request for Comments}, number = 7427, howpublished = {RFC 7427}, publisher = {RFC Editor}, doi = {10.17487/RFC7427}, url = {https://www.rfc-editor.org/info/rfc7427}, author = {Tero Kivinen and Joel Snyder}, title = {{Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)}}, pagetotal = 18, year = 2015, month = jan, abstract = {The Internet Key Exchange Version 2 (IKEv2) protocol has limited support for the Elliptic Curve Digital Signature Algorithm (ECDSA). The current version only includes support for three Elliptic Curve groups, and there is a fixed hash algorithm tied to each group. This document generalizes IKEv2 signature support to allow any signature method supported by PKIX and also adds signature hash algorithm negotiation. This is a generic mechanism and is not limited to ECDSA; it can also be used with other signature algorithms.}, }