Acronyms

The following acronyms may be used in this document in the description of IP security (IPsec).

Acronym	Full Form of Abbreviation
AES-128-GCM	Advanced Encryption Standard with 128-bit key size in Galois Counter Mode
AES-256-GCM	Advanced Encryption Standard with 256-bit key size in Galois Counter Mode
AES-128-CBC	Advanced Encryption Standard with 128-bit key size in Cipher Block Chaining Mode
AES-256-CBC	Advanced Encryption Standard with 256-bit key size in Cipher Block Chaining Mode
CA	Certificate Authority
CDP	CRL Distribution Point
CRL	Certificate Revocation List
CSR	Certificate Signing Request
DH	Diffie-Hellman
DPD	Dead Peer Detection
ECDSA	Elliptic Curve Digital Signature Algorithm
ESP	Encapsulating Security Payload protocol
IKEv2	Internet Key Exchange protocol, version 2
IPsec	IP Security
NAT	Network Address Translation
OSCP	Online Certificate Status Protocol
PAT	Port Address Translation
PKI	Public Key Infrastructure
PRF	Pseudo Random Function
RSA	Rivest-Shamir-Adleman
SA	Security Association
SAD	Security Association Database
SCEP	Simple Certificate Enrollment Protocol
SHA	Secure Hash Algorithm
SPD	Security Policy Database
SPI	Security Parameters Index (used to identify an SA)
TOS	Type of Service field in IPv4 header
VRF	Virtual Routing and Forwarding
VTI	Virtual Tunnel Interface