OAKLEY

The Oakley Key Determination Protocol uses a hybrid Diffie-Hellman technique to establish session keys on Internet hosts and routers. Oakley provides the important security property of Perfect Forward Secrecy and is based on cryptographic techniques that have survived substantial public scrutiny. Oakley can be used by itself if not attribute negotiation is needed or Oakley can be used in conjunction with ISAKMP. When ISAKMP is used with Oakley, key escrow is not feasible.