{'fraction_non_alphanumeric': 0.019681349578256794, 'fraction_numerical': 0.0037488284910965324, 'mean_word_length': 4.741935483870968, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Proposal for a New Security Association (SA) Negotiation Process in IPSec

IPSec is a highly-used security protocol for securing transactions on the Internet both for version 4 and version 6. To address this issue, IPSec uses several protocols and mechanisms as part of its operation. The SA negotiation process is part of it, enabling the definition of security settings.This paper offers a new architecture that guarantees SA generation with higher efficiency for multicast communications. This article addresses all the concerns while reducing latency. The SA negotiation process consists of four phases with the use of Diffie Hellman (DH) in Phase 2 to exchange a secret. DH is not immune to a certain number of attacks and the risk it incurs, impacts on the IPSec via the SA negotiation. Hence, it is important to assess the latency the process execution incurs. The analysis of this process shows some shortcomings related to the DH mechanism and the overhead. We have proposed to put S-WANE instead of DH; this replacement operation eliminates phase 3 as well.