A Cryptographic Evaluation of IPsec

Niels Ferguson and Bruce Schneier

Unpublished manuscript, February 1999.

Abstract

We review IPsec as defined in the RFCs issued in November 1998. All major components of IPsec contain serious security weaknesses. Yet in spite of the many problems, IPsec is probably the best protocol to use for IP security at this moment.

Download

Zipped PostScript (91 kB)
PDF (215 kB)