2023-04-25 All registries listed below have been closed. See . Registry closed The Situation Definition is a 32-bit bitmask which represents the environment under which the IPSEC SA proposal and negotiation is carried out. Requests for assignments of new situations must be accompanied by an RFC which describes the interpretation for the associated bit. If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. The upper two bits are reserved for private use amongst cooperating systems. 0x01 SIT_IDENTITY_ONLY 0x02 SIT_SECRECY 0x04 SIT_INTEGRITY The Security Protocol Identifier is an 8-bit value which identifies a security protocol suite being negotiated. Requests for assignments of new security protocol identifiers must be accompanied by an RFC which describes the requested security protocol. AH and ESP are examples of security protocol documents. If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0 RESERVED 1 PROTO_ISAKMP 2 PROTO_IPSEC_AH 3 PROTO_IPSEC_ESP 4 PROTO_IPCOMP 5 PROTO_GIGABEAM_RADIO 6-248 Unassigned 249-255 Reserved for private use The IPSEC ISAKMP Transform Identifier is an 8-bit value which identifies a key exchange protocol to be used for the negotiation. Requests for assignments of new ISAKMP transform identifiers must be accompanied by an RFC which describes the requested key exchange protocol. IKE is an example of one such document. If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0 RESERVED 1 KEY_IKE 2-248 Unassigned 249-255 Reserved for private use The IPSEC AH Transform Identifier is an 8-bit value which identifies a particular algorithm to be used to provide integrity protection for AH. Requests for assignments of new AH transform identifiers must be accompanied by an RFC which describes how to use the algorithm within the AH framework (AH). If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0-1 RESERVED 2 AH_MD5 3 AH_SHA 4 AH_DES 5 AH_SHA2-256 6 AH_SHA2-384 7 AH_SHA2-512 8 AH_RIPEMD 9 AH_AES-XCBC-MAC 10 AH_RSA 11 AH_AES-128-GMAC 12 AH_AES-192-GMAC 13 AH_AES-256-GMAC 14-248 Unassigned 249-255 Reserved for private use The IPSEC ESP Transform Identifier is an 8-bit value which identifies a particular algorithm to be used to provide secrecy protection for ESP. Requests for assignments of new ESP transform identifiers must be accompanied by an RFC which describes how to use the algorithm within the ESP framework (ESP). If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0 RESERVED 1 ESP_DES_IV64 2 ESP_DES 3 ESP_3DES 4 ESP_RC5 5 ESP_IDEA 6 ESP_CAST 7 ESP_BLOWFISH 8 ESP_3IDEA 9 ESP_DES_IV32 10 ESP_RC4 11 ESP_NULL 12 ESP_AES-CBC 13 ESP_AES-CTR 14 ESP_AES-CCM_8 15 ESP_AES-CCM_12 16 ESP_AES-CCM_16 17 Unassigned 18 ESP_AES-GCM_8 19 ESP_AES-GCM_12 20 ESP_AES-GCM_16 21 ESP_SEED_CBC 22 ESP_CAMELLIA 23 ESP_NULL_AUTH_AES-GMAC 24-248 Unassigned 249-255 Reserved for private use This is combined mode cipher, but combined mode algorithms are not a ature of IPsec-v2. Although some IKEv1/IPsec-v2 implementations inude this capability (see Section 5.4), it is not part of thprotocol. The IPSEC IPCOMP Transform Identifier is an 8-bit value which identifier a particular algorithm to be used to provide IP-level compression before ESP. Requests for assignments of new IPCOMP transform identifiers must be accompanied by an RFC which describes how to use the algorithm within the IPCOMP framework (IPCOMP). In addition, the requested algorithm must be published and in the public domain. If the RFC is not on the standards-track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0 RESERVED 1 IPCOMP_OUI 2 IPCOMP_DEFLATE 3 IPCOMP_LZS 4 IPCOMP_LZJH 5-47 Reserved for approved algorithms 48-63 Reserved for private use 64-255 Unassigned The IPSEC Security Association Attribute consists of a 16-bit type and its associated value. IPSEC SA attributes are used to pass miscellaneous values between ISAKMP peers. Requests for assignments of new IPSEC SA attributes must be accompanied by an Internet Draft which describes the attribute encoding (Basic/Variable-Length) and its legal values. Section 4.5 of this document provides an example of such a description. Registry closed 1 B SA Life Type 2 V SA Life Duration 3 B Group Description 4 B Encapsulation Mode 5 B Authentication Algorithm 6 B Key Length 7 B Key Rounds 8 B Compress Dictionary Size 9 V Compress Private Algorithm 10 B ECN Tunnel 11 B Extended (64-bit) Sequence Number 12 V Authentication Key Length 13 B Signature Encoding Algorithm 14 B Address Preservation 15 B SA Direction 16-32000 Unassigned 32001-32767 Reserved for private use Registry closed 0 Reserved 1 seconds 2 kilobytes 3-61439 Unassigned 61440-65535 Reserved for private use Please refer to the registry Group Description (Value 4) at Registry closed 0 Reserved 1 Tunnel 2 Transport 3 UDP-Encapsulated-Tunnel 4 UDP-Encapsulated-Transport 5-61439 Unassigned 61440-65535 Reserved for private use Registry closed 0 Reserved 1 HMAC-MD5 2 HMAC-SHA 3 DES-MAC 4 KPDK 5 HMAC-SHA2-256 6 HMAC-SHA2-384 7 HMAC-SHA2-512 8 HMAC-RIPEMD 9 AES-XCBC-MAC 10 SIG-RSA 11 AES-128-GMAC 12 AES-192-GMAC 13 AES-256-GMAC 14-61439 Unassigned 61440-65535 Reserved for private use IANA does not assign Specifies a private vendor compression algorithm. The first three (3) octets must be an IEEE assigned company_id (OUI). The next octet may be a vendor specific compression subtype, followed by zero or more octets of vendor data. If unspecified, the default shall be assumed to be Forbidden. Registry closed 0 Reserved 1 Allowed 2 Forbidden 3-61439 Unassigned 61440-65535 Reserved for private use No additional class values will be assigned for this attribute. 0 RESERVED 1 64-bit Sequence Number Registry closed 0 Reserved 1 RSASSA-PKCS1-v1_5 2 RSASSA-PSS 3-61439 Unassigned 61440-65535 Reserved for private use Registry closed 0 Reserved 1 None 2 Source-Only 3 Destination-Only 4 Source-and-Destination 5-61439 Unassigned 61440-65535 Private Use Registry closed 0 Reserved 1 Sender-Only 2 Receiver-Only 3 Symmetric 4-61439 Unassigned 61440-65535 Private Use Registry closed The IPSEC Labeled Domain Identifier is a 32-bit value which identifies a namespace in which the Secrecy and Integrity levels and categories values are said to exist. Requests for assignments of new IPSEC Labeled Domain Identifiers should be granted on demand. No accompanying documentation is required, though Internet Drafts are encouraged when appropriate. 0 Reserved 0x80000000-0xffffffff Reserved for private use The IPSEC Identification Type is an 8-bit value which is used as a discriminant for interpretation of the variable-length Identification Payload. Requests for assignments of new IPSEC Identification Types must be accompanied by an RFC which describes how to use the identification type within IPSEC. If the RFC is not on the standards track (i.e., it is an informational or experimental RFC), it must be explicitly reviewed and approved by the IESG before the RFC is published and the transform identifier is assigned. Registry closed 0 RESERVED 1 ID_IPV4_ADDR 2 ID_FQDN 3 ID_USER_FQDN 4 ID_IPV4_ADDR_SUBNET 5 ID_IPV6_ADDR 6 ID_IPV6_ADDR_SUBNET 7 ID_IPV4_ADDR_RANGE 8 ID_IPV6_ADDR_RANGE 9 ID_DER_ASN1_DN 10 ID_DER_ASN1_GN 11 ID_KEY_ID 12 ID_LIST 13-248 Unassigned 249-255 Reserved for private use Registry closed The IPSEC Notify Message Type is a 16-bit value taken from the range of values reserved by ISAKMP for each DOI. There is one range for error messages (8192-16383) and a different range for status messages (24576-32767). Requests for assignments of new Notify Message Types must be accompanied by an Internet Draft which describes how to use the identification type within IPSEC. Registry closed 8192 Reserved 8193-16000 Unassigned 16001-16383 Reserved for private use Registry closed 24576 RESPONDER-LIFETIME 24577 REPLAY-STATUS 24578 INITIAL-CONTACT 24579-32000 Unassigned 32001-32767 Reserved for private use IETF IPSEC WG mailto:ipsec&ietf.org 2023-01-04 Marcus Leech mailto:mleech&nortelnetworks.com 2000-10