Administration of the Avaya G350 Media Gateway - Avaya Support

OverviewCritical security parameters and private keysTable 15 describes the CSPs (Critical Security Parameters) defined in the module.Table 15: Critical security parameters 1 of 3Key Description/Usage StorageIKE Pre-shared KeysHASH_I, HASH_RIKE Pre-Shared Session Key(SKEYID)IKE Ephemeral DH sharedsecret (g^ab)IKE Ephemeral DH private key(a)IKE Ephemeral DH private key(a)IKE Session Phase 1 Secret(SKEYID_d)IKE Session Phase 1 HMACKey (SKEYID_a)IKE Session Phase 1Encrypted Key (SKEYID_e)IKE Session Phase 1 TDESkey (SKEYID_e)This key generates IKE SKEYID_dduring pre-sharedkey authentication.The first-time key must be enteredmanually (via RS232 connected to thePC acting as terminal emulation). Otherkeys can be defined remotely overencrypted and authenticated IPSECtunnel.Used for generation of SKEYID,SKEYID_d, SKEYID_a, SKEYID_e.Generated for VPN IKE Phase 1 keyestablishment.Generated for VPN IKE Phase 1 byhashing pre-shared keys with responder/receiver nonceGenerated for VPN IKE Phase 1 keyestablishmentThe private exponent used in DHexchange. Generated for VPN IKEPhase 1 key establishment.The private exponent used in DHexchange. Generated for VPN IKEPhase 1 key establishment.Phase 1 key used to derive keyingmaterial for IPSec SAsKey used for integrity and authenticationof the ISAKMP SAShared key used for extraction ofencryption keys protecting the ISAKMPSAKey used for TDES data encryption ofISAKMP SADRAM (plaintext)DRAM (plaintext)DRAM (plaintext)1 of 3Issue 3 January 2005 297