GB/T 36968-2018Information security technology —Technical specification for IPSec VPN (English PDF)
信息安全技术 IPSec VPN技术规范
This is a limited preview
Buy now to download the full PDF (49 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36968-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 36968-2018 is the English-translated version of 信息安全技术 IPSec VPN技术规范.
GB/T 36968-2018 is the Chinese technical specification for IPSec VPN. It sets out the cryptographic algorithms and key types to be used, the key exchange protocol and the security message protocol, and then the requirements for IPSec VPN products: functions, performance parameters and security management, together with the tests for each.
The protocols rely on the Chinese SM2, SM3 and SM4 algorithms and on digital certificates to GB/T 20518, and they reference RFC 2408, RFC 3947 and RFC 3948. It defines terms such as security association, ISAKMP and payload, and an informative annex gives an overview of IPSec VPN.
It applies to the development, testing, use and management of IPSec VPN products. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 36968-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 cryptographic algorithm and key type
- 5.1 Cryptographic Algorithm
- 5.2 Key Type
- 6 Agreement
- 6.1 Key Exchange Protocol
- 6.2 Security Message Protocol
- 7 IPSecVPN Product Requirements
- 7.1 Product Functional Requirements
- 7.2 Product performance parameters
- 7.3 Security Management Requirements
- 8 IPSecVPN Product Detection
- 8.1 Product Function Test
- 8.2 Product Performance Testing
- 8.3 Security Management Detection
- Appendix A (informative) IPSecVPN Overview
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies the technical protocols, product requirements and testing methods of IPSecVPN.
This standard applies to the development, testing, use and management of IPSecVPN products.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format
GB/T 25056 information security technology certificate authentication system password and related security technical specifications
GB/T 32905 information security technology SM3 password hash algorithm
GB/T 32907 information security technology SM4 block cipher algorithm
GB/T 32915 information security technology binary sequence randomness detection method
GB/T 32918 (all parts) Information Security Technology SM2 Elliptic Curve Public Key Cryptography
GB/T 35276 Information Security Technology SM2 Cryptographic Algorithm Usage Specification
RFC2408 Internet Security Association and Key Management Protocol (InternetSecurityAssociationandKeyManagement Protocol)
NAT traversal negotiation in the RFC3947 key exchange process (NegotiationofNAT-TraversalintheIKE)
UDP Encapsulation of RFC3948 IPSecESP Packet (UDPEncapsulationofIPsecESPPackets)
3 Terms and definitions
The following terms and definitions apply to this document.
3.1 Security association
An agreement established by two communicating entities through negotiation that describes how an entity uses security services for secure communication.
Note: The Security Alliance includes all the information needed to perform various network security services, such as IP layer services (such as header authentication and payload encapsulation), transport layers, and Self-protection of application layer services or negotiated communications.
3.2 Internet Security Alliance and Key Management Protocol
A protocol for establishing security associations and key management in an Internet environment. It defines the establishment, negotiation, modification and deletion of security The process and message format of the federation, as well as the payload format of the exchange key generation and authentication data. These formats are transport key and authentication information. Provides a consistent framework.
3.3 Payload
The data format of the exchange messages of the ISAKMP communication parties is the basic unit for constructing the ISAKMP message.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 49 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20518Information security technology—Public key infrastructure—Digital certificate format
- GB/T 25056Information security technology—Specifications of cryptograph and related security technology for certificate authentication system
- GB/T 32905Information security techniques - SM3 cryptographic hash algorithm
- GB/T 32907Information security technology - SM4 block cipher algorithm
- GB/T 32915Cybersecurity technology — Randomness test methods for binary sequences
- GB/T 35276Information security technology—SM2 cryptographic algorithm usage specification
GB/T 32918 · RFC2408 · RFC3947 · RFC3948
Cited by
- GB/T 32922-2023Information security technology—Baseline and implementation guide of IPSec VPN securing access
- GB/T 34079.5-2021Service specification of electronic government common platform based on cloud computing—Part 5: Mobility service
- GA/T 1737-2020Technical requirements of police mobile information network
Similar standards
How to Download GB/T 36968-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 20518-2018 — Information security technology—Public key infrastructure—Digital certificate format
GB/T 25056-2018 — Information security technology—Specifications of cryptograph and related security technology for certificate authentication system
GB/T 32905-2016 — Information security techniques - SM3 cryptographic hash algorithm
Secure payment via Stripe
Payments accepted
GB/T 36968-2018
$590.00