Send in your ideas. Deadline April 1, 2026
logo
hex
Vendor stores
Nix Flake
Grant
Theme fund: NGI Zero Core
Start: 2024-12

CryptoLyzer IKE

Add IKE protocol to CryptoLyzer protocol analyser

CryptoLyzer is a cybersecurity tool that can analyze the cryptography-related settings of clients and servers in the case of several different protocols. The tool’s primary purpose is to support end users as well as system administrators, security engineers, auditors, etc., in their work by telling them the details of the currently applied setting and informing them about the potential weaknesses and vulnerabilities.

Unlike many other notable free software projects that focus on just one protocol family, CryptoLyzer wants to be as comprehensive as possible. Internet Key Exchange or IKE (RFC 7296) lies at the heart of IPsec. IKE performs mutual authentication between two parties and establishes an IKE Security Association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) [ESP] or Authentication Header (AH) [AH] and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. The project will allow users to analyze a security protocol that is widely used in critical infrastructure, and which cannot be analyzed by any of of the current tools, at least not ones that are publicly available for users.

Logo NLnet: abstract logo of four people seen from above Logo NGI Zero: letterlogo shaped like a tag

This project was funded through the NGI0 Core Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101092990.