Internet Key Exchange Protocol Simulation of HAIPE in Security Network

摘要

The High Assurance Internet Protocol Encrypt or (HAIPE) Interoperability Specification is developed by the US Department of Defense to permit enclaves equipped with compliant gateways to communicate securely over un-trusted networks. Using Internet Key Exchange (IKE), HAIPEs can establish automated security associations (SA) for this device instead of manually establishing. The additional HAIPEs have an effect upon the network performance to some extent when the security of network is enhanced. In order to quantify the impact of HAIPEs on the end-to-end performance of networks, we designed a cryptographic key agreement protocol simulation scenario to emulate the process of dynamic negotiating security information to establish SAs, and some typical application was configured to execute simulation. This paper describes the HAIPE IKE model and presents a IKE protocol simulation. The simulation results show the process of HAIPEs IKE protocol and the impact of HAIPEs on network performance, and validate the correctness these models.