RFC 3664 (rfc3664) - Page 2 of 4

The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE)

RFC 3664         The AES-XCBC-PRF-128 Algorithm for IKE     January 2004


2.  The AES-XCBC-PRF-128 Algorithm

   The AES-XCBC-PRF-128 algorithm is identical to [AES-XCBC-MAC] except
   that the truncation step in section 4.3 of [AES-XCBC-MAC] is *not*
   performed.  That is, there is no processing after section 4.2 of
   [AES-XCBC-MAC].

   The test vectors in section 4.6 can be used for AES-XCBC-PRF-128, but
   only those listed as "AES-XCBC-MAC", not "AES-XCBC-MAC-96".

3.  Security Considerations

   The security provided by AES-XCBC-MAC-PRF is based upon the strength
   of AES.  At the time of this writing, there are no known practical
   cryptographic attacks against AES or AES-XCBC-MAC-PRF.

   As is true with any cryptographic algorithm, part of its strength
   lies in the security of the key management mechanism, the strength of
   the associated secret key, and upon the correctness of the
   implementations in all of the participating systems.  [AES-XCBC-MAC]
   contains test vectors to assist in verifying the correctness of the
   AES-XCBC-MAC-PRF code.  The test vectors all show the full MAC value
   before it is truncated to 96 bits.  The PRF makes use of the full MAC
   value, not the truncated one.

4.  Intellectual Property Statement

   The IETF takes no position regarding the validity or scope of any
   intellectual property or other rights that might be claimed to
   pertain to the implementation or use of the technology described in
   this document or the extent to which any license under such rights
   might or might not be available; neither does it represent that it
   has made any effort to identify any such rights.  Information on the
   IETF's procedures with respect to rights in standards-track and
   standards-related documentation can be found in BCP-11.  Copies of
   claims of rights made available for publication and any assurances of
   licenses to be made available, or the result of an attempt made to
   obtain a general license or permission for the use of such
   proprietary rights by implementors or users of this specification can
   be obtained from the IETF Secretariat.

   The IETF invites any interested party to bring to its attention any
   copyrights, patents or patent applications, or other proprietary
   rights which may cover technology that may be required to practice
   this standard.  Please address the information to the IETF Executive
   Director.





Hoffman                     Standards Track