Cisco IOS CA
Standards
Cisco IOS supports the following open CA standards:
-
Internet Key Exchange (IKE) A hybrid
protocol that implements Oakley and Skeme key exchanges inside the ISAKMP
framework. IKE is covered in Chapters 9 and 10.
-
Public-Key Cryptography Standard #7 (PKCS
#7) A standard developed by RSA Data Security, Inc. used to encrypt and sign
certificate enrollment messages.
-
Public-Key Cryptography Standard #10 (PKCS
#10) A standard syntax developed by RSA Data Security, Inc. for certificate
requests.
-
RSA Keys RSA is the
public-key cryptographic system developed by RSA Data Security, Inc. RSA keys
come in pairs: one public key and one private key.
-
X.509v3 Certificates An X.509 certificate is a collection of a standard set of fields
containing information about a user or device and their corresponding public
key. The X.509 standard defines what information goes into the certificate and
describes how to encode it (the data format). The encoded information is used
with the IKE protocol when authentication requires public
keys.