Avaya G250 Administration page 596

FIPS
Table 86: Critical security parameters (continued)
Key
IKE Ephemeral DH private key
(a)
IKE Session phase-1 Secret
(SKEYID_d)
IKE Session phase-1 HMAC
Key (SKEYID_a)
IKE Session phase-1
Encrypted Key (SKEYID_e)
IKE Session phase-1 TDES
key (SKEYID_e)
IKE Session phase-1 DES key
IKE Session phase-1 AES key
Noncie, Noncer
IPSEC SA phase-2 TDES key
IPSEC SA phase-2 DES key
IPSEC SA phase-2 AES key
IPSEC SA phase-2, HMAC
keys
IPSEC SA phase-2 keys per
protocol
IKE ephemeral phase-2
DH private key phase-2
IKE ephemeral phase-2
DH shared secret phase-2
IPSEC SA phase-2 keys per
protocol
User password
Root password
Radius Secret
596 Administration for the Avaya G250 and Avaya G350 Media Gateways
Description/Usage
The private exponent used in DH exchange. Generated for
VPN IKE phase-1 key establishment.
phase-1 key used to derive keying material for IPSec SAs
Key used for integrity and authentication of the ISAKMP SA
Shared key used for extraction of encryption keys protecting
the ISAKMP SA
Key used for TDES data encryption of ISAKMP SA
Key used for DES data encryption of ISAKMP SA
Key used for AES data encryption of ISAKMP SA
phase-2 initiator and responder nonce
phase-2, basic quick mode
phase-2, basic quick mode
phase-2, basic quick mode
phase-2, basic quick mode
phase-2, basic quick mode
phase-2 Diffie Hellman private keys used in PFS for key
renewal
phase-2 PFS Diffie Hellman shared secret used in PFS for
key renewal
phase-2, basic quick mode
Used for password authentication of CLI users
Used for authentication of default CLI user during first setup
Used for hashing password with MD5. One secret common
to both Primary and Secondary Radius server.
2 of 3