Data integrity.
The integrity and confidentiality of data in the IPsec specification is ensured through the use of authentication and encryption mechanisms. Encryption is based on a preliminary agreement by the parties to the information exchange of the so–called "security context" - the applied cryptographic algorithms, algorithms for managing key information and their parameters. The IPsec specification provides for the possibility for parties to support information exchange of various protocols and parameters for authentication and encryption of data packets, as well as various key distribution schemes. In this case, the result of agreeing on the security context is the establishment of a security parameter index (SPI), which is a pointer to a specific element of the internal structure of the information exchange side describing possible sets of security parameters.
Essentially, IPsec operates at the third layer, i.e. the network layer. As a result, the transmitted IP packets will be protected in a manner that is transparent to network applications and infrastructure. Unlike SSL (Secure Socket Layer), which operates at the fourth (i.e. transport) layer and is more closely linked to higher levels of the OSI model, IPsec is designed to provide low-level protection.
IPsec adds a header to IP data ready for transmission over a virtual private network to identify protected packets. These packets are encapsulated in other IP packets before being transmitted over the Internet. IPsec supports several types of encryption, including Data Encryption Standard (DES) and Message Digest 5 (MD5). There is also an IPsec implementation with the Russian encryption algorithm GOST 28147-89 in the company's solutions CryptoPro.
Oleg Petukhov, lawyer in the field of international law and personal data protection, information security specialist security, protection of information and personal data.
Telegram channel: https://t.me/protectioninformation
Telegram Group: https://t.me/informationprotection1
Website: https://legascom.ru
Email: online@legascom.ru
#informationprotection #informationsecurity