IPv6 Conformance Test For IKE (SGW:Initiator)



No. Title Category Detail

Initiator Test


1 Phase I


1.1 main mode


1.1.1 pre-shared key


1.1.1.1 Sending the first message


1.1.1.1.1 ISAKMP Header

1 ISAKMP Header Format *** BASIC

1.1.1.1.2 Security Association Payload

2 SA Payload Format *** BASIC

1.1.1.1.3 Proposal Payload

3 Proposal Payload Format *** BASIC

1.1.1.1.4 Transform Payload


1.1.1.1.4.1 Transform Payload Format check

4 Transform Payload Format *** BASIC
5 Transform Payload Format (Multiple Transform Payload) *** ADVANCED Phase-1 sending multiple proposal

1.1.1.1.4.2 Transform Payload SA Attributes check

6 Attributes include MD5 *** ADVANCED MD5
7 Attributes include SHA *** BASIC
8 Attributes include DES ** ADVANCED DES-CBC
9 Attributes include 3DES ** BASIC
10 Attributes include AES ADVANCED AES-CBC
11 Attributes include PSK *** BASIC
12 Attributes include RSA sign ** ADVANCED Digital Signature (RSA)
13 Attributes include DH1 *** ADVANCED DH1
14 Attributes include DH2 ** BASIC
15 Attributes include DH5 ADVANCED DH5
16 Attributes include DH14 ADVANCED DH14

1.1.1.2 Sending the third message


1.1.1.2.1 Key Exchange Payload

17 Key Exchange Payload Format + DH1 *** ADVANCED DH1
18 Key Exchange Payload Format + DH2 ** BASIC
19 Key Exchange Payload Format + DH5 ADVANCED DH5
20 Key Exchange Payload Format + DH14 ADVANCED DH14

1.1.1.2.2 Nonce Payload

21 Nonce Payload Format *** BASIC

1.1.1.3 Sending the fifth message


1.1.1.3.1 Encryption of Payload

22 Encryption of ISAKMP payload *** BASIC

1.1.1.3.2 Identification Payload

23 Identification Payload Format *** BASIC

1.1.1.3.3 HASH Payload

24 HASH Payload Format *** BASIC

1.1.1.4 Implementation of Main Mode with pre-shared key

25 Implementation of Main Mode with pre-shared key *** BASIC

1.1.2 RSA signature


1.1.2.1 Sending the fifth message


1.1.2.1.1 Signature Payload

26 Signature Payload Format *** ADVANCED Digital Signature (RSA)

1.1.2.1.2 Certificate Payload

27 Certificate Payload Format *** ADVANCED Digital Signature (RSA)

1.1.2.1.2 Certificate Request Payload

28 Certificate Request Payload Format *** ADVANCED Digital Signature (RSA)

1.1.2.2 Implementation of Main Mode with RSA signatures

29 Implementation of Main Mode with RSA signatures ** ADVANCED Digital Signature (RSA)

1.2 Payload Processing


1.2.1 General Message Processing

30 Processing invalid ISAKMP Payload Length * BASIC

1.2.2 ISKAMP Header Processing

31 Processing invalid Responder Cookie field * BASIC
32 Processing invalid Next Payload field * BASIC
33 Processing invalid Major Version field (major 15, minor 0) * BASIC
34 Processing invalid Minor Version field (major 1, minor 15) * BASIC
35 Processing invalid Exchange Type field * BASIC
36 Processing invalid Flags field * BASIC
37 Processing invalid Message ID field * BASIC

1.2.3 Generic Payload Header Processing

38 Processing invalid RESERVED field * BASIC

1.2.4 Security Association Payload Processing

39 Processing invalid Next Payload field * BASIC
40 Processing invalid DOI field * BASIC
41 Processing invalid Situation field * BASIC
42 Processing invalid proposal (Encryption Algorithm) * BASIC
43 Processing invalid proposa (Hash Algorithm) * BASIC
44 Processing invalid proposal (Authentication method) * BASIC
45 Processing invalid proposal (Diffie-Hellman Group) * BASIC
46 Processing invalid proposal (Life Type) * BASIC

1.2.5 Proposal Payload Processing

47 Processing invalid Protocol-ID field * BASIC
48 Processing invalid SPI field * BASIC
49 Processing invalid proposal * BASIC

1.2.6 Transform Payload Processing

50 Processing invalid Transform-ID field * BASIC
51 Processing invalid Transform Payload * BASIC
52 Processing invalid Transform Payloads (Receiving modified proposal) * BASIC

1.2.7 Key Exchange Payload Processing

53 Processing invalid Key Exchange Data field * BASIC

1.2.8 Identification Payload Processing

54 Processing invalid ID type field * BASIC
55 Not include Identification Payload * BASIC
56 Invalid Identification Payload recieve * BASIC

1.2.9 Hash Payload Processing

57 Processing invalid Hash Payload * BASIC
58 Processing invalid Hash Data field * BASIC

1.2.10 Signature Payload Processing

59 Processing invalid Signature Payload * ADVACNED Digital Signature (RSA)
60 Processing invalid Signature Data field * ADVACNED Digital Signature (RSA)

1.2.11 Certificate Request Payload Processing

61 Processing invalid Certificate Encoding field * ADVACNED Digital Signature (RSA)
62 Processing invalid Certificate Authority field * ADVACNED Digital Signature (RSA)
63 Processing invalid Certificate Type with Certificate Authority * ADVACNED Digital Signature (RSA)

1.2.12 Certificate Payload Processing

64 Processing invalid Certificate Encoding field * ADVACNED Digital Signature (RSA)
65 Processing invalid Certificate Data field * ADVACNED Digital Signature (RSA)

2 Phase II


2.1 quick mode


2.1.1 Sending the first message


2.1.1.1 Encryption of payload

66 Encryption of ISAKMP payload *** BASIC

2.1.1.2 Position of payload

67 Position of payload *** BASIC

2.1.1.3 ISAKMP Header

68 ISAKMP Header Format *** BASIC

2.1.1.4 HASH(1) Payload

69 HASH Payload Format *** BASIC

2.1.1.5 Security Association Payload

70 SA Payload Format *** BASIC

2.1.1.6 Proposal Payload

71 Proposal Payload Format *** BASIC

2.1.1.7 Transform Payload


2.1.1.7.1 Transform Payload Format check

72 Transform Payload Format *** BASIC
73 Transform Payload Format (Multiple Transform) *** ADVANCED Phase-2 sending multiple proposal

2.1.1.7.2 Transform Payload SA Attributes check

74 ESP_DES,HMAC-MD5 *** ADVANCED DES-CBC, HMAC-MD5
75 ESP_3DES,HMAC-MD5 ** ADVANCED HMAC-MD5
76 ESP_3DES,HMAC-SHA BASIC
77 ESP_3DES,AES-XCBC-MAC ADVANCED AES-XCBC-MAC
78 ESP_AES,HMAC-SHA ADVANCED AES-CBC (128bit)
79 ESP_NULL,HMAC-MD5 *** ADVANCED ESP_NULL, HMAC-MD5
80 ESP_NULL,HMAC-SHA *** ADVANCED ESP_NULL
81 ESP_NULL,AES-XCBC-MAC ADVANCED ESP_NULL, AES-XCBC-MAC
82 ESP without Authentication Algorithm (ESP_DES) *** ADVANCED ESP (without Authentication), DES-CBC
83 ESP without Authentication Algorithm (ESP_3DES) *** ADVANCED ESP (without Authentication)
84 ESP without Authentication Algorithm (ESP_AES) ADVANCED ESP (without Authentication), AES-CBC (128bit)

2.1.1.8 Transform Payload w/ PFS


2.1.1.8.1 PFS with DH

85 enable PFS with DH1 *** ADVANCED PFS, DH1
86 enable PFS with DH2 ** ADVANCED PFS
87 enable PFS with DH5 ADVANCED PFS, DH5
88 enable PFS with DH14 ADVANCED PFS, DH14

2.1.1.8.2 consistent of multiple proposal

89 consistent of proposal (Diffie-Hellman Group (Transform Payload)) *** ADVANCED Phase-2 sending multiple proposal

2.1.1.9 Key Exchange Payload w/ PFS

90 Key Exchange Payload Format +DH1 *** ADVANCED PFS, DH1
91 Key Exchange Payload Format +DH2 ** ADVANCED PFS
92 Key Exchange Payload Format +DH5 ADVANCED PFS, DH5
93 Key Exchange Payload Format +DH14 ADVANCED PFS, DH14

2.1.1.10 Nonce Payload

94 Nonce Payload Format *** BASIC

2.1.1.11 Key Exchange Payload w/o PFS

95 Key Exchange Payload w/o PFS BASIC

2.1.1.12 Identification Payload

96 Identification Payload Format (Tunnel mode vs SGW) *** BASIC
97 Identification Payload Format (Tunnel mode vs HOST) *** BASIC

2.1.2 Sending the third message


2.1.2.1 HASH(3) Payload

98 HASH Payload Format *** BASIC

2.1.3 Receiving the fourth message (Informational Exchange)

99 set Commit Bit (CONNECTED Notify Message) *** ADVANCED

Commit bit

2.1.4 Implementation of Quick Mode

100 ESP_3DES (Tunnel mode vs SGW) ADVANCED ESP (without Authentication)
101 ESP_3DES and HMAC-SHA (Tunnel mode vs SGW) *** BASIC
102 ESP_3DES (Tunnel mode vs HOST) ADVANCED ESP (without Authentication)
103 ESP_3DES and HMAC-SHA (Tunnel mode vs HOST) *** BASIC
104 ESP_3DES and HMAC-SHA with PFS *** ADVANCED PFS

2.1.5 Modification of IPsec SA

105 Re-keying of IPsec SA BASIC
106 Using new SA for outbound traffic ** BASIC
107 Accept both old and new SA for incoming traffic ** BASIC

2.1.6 Anti-replay

108 Increasing Sequence Number BASIC
109 Sequence Number Verification ADVANCED Receiver

2.2 Payload Processing


2.2.1 General Message Processing

110 Processing invalid ISAKMP Payload Length * BASIC

2.2.2 ISKAMP Header Processing

111 Processing invalid Responder Cookie field * BASIC
112 Processing invalid Next Payload field * BASIC
113 Processing invalid Major Version field (major 15, minor 0)* BASIC
114 Processing invalid Minor Version field (major 1, minor 15) * BASIC
115 Processing invalid Exchange Type field * BASIC
116 Processing invalid Flags field * BASIC
117 Processing invalid Message ID field * BASIC

2.2.3 Generic Payload Header Processing

118 Processing invalid Next Payload field * BASIC
119 Processing invalid RESERVED field * BASIC

2.2.4 Hash Payload Processing

120 Processing invalid Hash Payload * BASIC
121 Processing invalid Hash Data field * BASIC

2.2.5 Security Association Payload Processing

122 Processing invalid Next Payload field * BASIC
123 Processing invalid DOI field * BASIC
124 Processing invalid Situation field * BASIC
125 Processing invalid proposal (ESP Authentication) * BASIC
126 Processing invalid proposal (Diffie-Hellman Group) * BASIC
127 Processing invalid proposal (Life Type) * BASIC
128 Processing invalid proposal (Encapsulation Mode) * BASIC

2.2.6 Proposal Payload Processing

129 Processing invalid Protocol-ID field * BASIC
130 Processing invalid SPI field * BASIC
131 Processing invalid proposal * BASIC

2.2.7 Transform Payload Processing

132 Processing invalid Transform-ID field * BASIC
133 Processing invalid Transform Payload * BASIC
134 Processing invalid Transform Payload (Receiving modified proposal) * BASIC

2.2.8 Key Exchange Payload Processing

135 Processing invalid Key Exchange Data field * BASIC

2.2.9 Identification Payload Processing

136 Processing invalid ID type field * BASIC
137 Invalid Identification Payload * BASIC
This Report was generated by TAHI IPv6 Conformance Test Suite