March 5, 2002
Practical Aspects of Modern Cryptography
34
IPSEC Architecture
nKey management establishes a Security Association (SA) for a session
nSA used to provide authentication/confidentiality services for that session
nSA is referenced via a security parameter index (SPI) in each IP datagram header