I need to fully understand the IPSec Phase 1 negotiation. now, I break this to 3 steps:
- Algorithm negotiations
- Key Exchange Data
- Identification
I'm using Wireshark to investigate the process and so far I fully understand the first part (Algorithm Negotiations).
My current problem lies in the 2nd part: Key Exchange Data.
The algorithms in use are AES-CBC-256bit, Pre-shared key, MD5 & 1024 bit Group.
The "ISAKMP Payload"->"KeyExchange Payload"->"KeyExchangeData" is beyond me... I have no clue what it is.. an MD5'ed pre-shared key? Is it encrypted?