<x:xmpmeta tsc:version="2.0.1" xmlns:x="adobe:ns:meta/" xmlns:tsc="http://www.techsmith.com/xmp/tsc/">
   <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:tscDM="http://www.techsmith.com/xmp/tscDM/" xmlns:tscIQ="http://www.techsmith.com/xmp/tscIQ/" xmlns:tscHS="http://www.techsmith.com/xmp/tscHS/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#" xmlns:exif="http://ns.adobe.com/exif/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
      <rdf:Description dc:date="2017-04-13 10:31:10 PM" dc:source="Camtasia,9.0.3,enu" dc:title="l_20ips3" tscDM:firstFrame="l_20ips3_First_Frame.png" tscDM:originId="2625EA67-814F-4A0C-B4C7-2902396CFF3B" tscDM:project="l_20ips3.tscproj">
         <xmpDM:duration xmpDM:scale="1/1000" xmpDM:value="1372466"/>
         <xmpDM:videoFrameSize stDim:unit="pixel" stDim:h="1080" stDim:w="1440"/>
         <tsc:langName>
            <rdf:Bag>
               <rdf:li xml:lang="en-US">English</rdf:li></rdf:Bag>
         </tsc:langName>
         <xmpDM:Tracks>
            <rdf:Bag>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="ScreenText" xmpDM:frameRate="f1000" xmpDM:trackName="Screen Text">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges HDR = IKE Header SAx1 = Offered and Chosen algorithms, DH gro u p KEx = D -" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="H Public key Nx = Nonces CERTREQ = Certificate Request IDx = Identity CERT = Certificate SK{ ." xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="..}" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="= MAC and Encrypt A UTH = Authentication SAx2 = Algorithms, parameters for IPsec S A TSx = Traffic Selectors" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="for IPsec SA N = Notify D = Delete CP = Configuration (a) Set up SA for IKE Exchanges Here" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="are my algorithms, my DH public key, my Nonce HDR, SAi, Ni Here is my chosen algorithm, my public key," xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="my nonce, acceptable Root CAs HDR, SAr1, KEr, Nr, [CertReq] Here is my ID, Traffic selectors HDR, E(SK, {IDi, [Cert]," xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="[CertReq], IDr, AUTH, SAi2, TSi, TSr}) OK." xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Here is my certificate, traffic selector HDR, E(SK, {IDr, [Cert], AUTH, SAr2, TSi, TSr}) (b) Set up other SAs Let’s" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="setup a new SA with this key and traffic selector HDR, E(SK, {[N], SA, Ni, [KEi], [TSi, TSr]}) OK, Here" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="is my nonce, key, and traffic selectors HDR, E(SK, {SA, Nr, [KEr],[TSi,TSr]}) (c) Management/Error/Other Notifications Alert! Delete/Change this SA HDR," xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="E(SK, {[N], [D], [CP], …}) Alert! Delete/Change this SA HDR, E(SK, {[N], [D], [CP], …}) Initiator Responder" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont) SkeySeed SK is generated by D-H exchange A Pseudo Random Function (PRF) is used with SK to" xmpDM:startTime="46367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="generate all other keys Encryption Key + Integrity Key per side Þ Four keys/SA Traffic selectors specify the IP address" xmpDM:startTime="46367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="range, ports, and IP protocol type for the SA Ref: C." xmpDM:startTime="46367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Kaufman, et al, “IKEv2,” RFC 5996, September 2010" xmpDM:startTime="46367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges HDR = IKE Header SAx1 = Offered and Chosen algorithms, DH gro u p KEx = D -" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="H Public key Nx = Nonces CERTREQ = Certificate Request IDx = Identity CERT = Certificate SK{ ." xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="..}" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="= MAC and Encrypt A UTH = Authentication SAx2 = Algorithms, parameters for IPsec S A TSx = Traffic Selectors" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="for IPsec SA N = Notify D = Delete CP = Configuration (a) Set up SA for IKE Exchanges Here" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="are my algorithms, my DH public key, my Nonce HDR, SAi, Ni Here is my chosen algorithm, my public key," xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="my nonce, acceptable Root CAs HDR, SAr1, KEr, Nr, [CertReq] Here is my ID, Traffic selectors HDR, E(SK, {IDi, [Cert]," xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="[CertReq], IDr, AUTH, SAi2, TSi, TSr}) OK." xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Here is my certificate, traffic selector HDR, E(SK, {IDr, [Cert], AUTH, SAr2, TSi, TSr}) (b) Set up other SAs Let’s" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="setup a new SA with this key and traffic selector HDR, E(SK, {[N], SA, Ni, [KEi], [TSi, TSr]}) OK, Here" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="is my nonce, key, and traffic selectors HDR, E(SK, {SA, Nr, [KEr],[TSi,TSr]}) (c) Management/Error/Other Notifications Alert! Delete/Change this SA HDR," xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="E(SK, {[N], [D], [CP], …}) Alert! Delete/Change this SA HDR, E(SK, {[N], [D], [CP], …}) Initiator Responder" xmpDM:startTime="189133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont) SkeySeed SK is generated by D-H exchange A Pseudo Random Function (PRF) is used with SK to" xmpDM:startTime="193667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="generate all other keys Encryption Key + Integrity Key per side Þ Four keys/SA Traffic selectors specify the IP address" xmpDM:startTime="193667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="range, ports, and IP protocol type for the SA Ref: C." xmpDM:startTime="193667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Kaufman, et al, “IKEv2,” RFC 5996, September 2010" xmpDM:startTime="193667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="294300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="294300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="294300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="449033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="449033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="467733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="467733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="467733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="472200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="472200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="473300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="473300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="473300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="476133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="476133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="478800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="478800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="478800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="506400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="506400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN RFC 4308: VPN-A: Older, VPN-B: Stronger" xmpDM:startTime="545533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B Specified by NSA for use with sensitive information Ref: http://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography" xmpDM:startTime="548433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="548433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary IPSec provides authentication, confidentiality, and key management at Layer 3." xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Applies to all traffic." xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Security associations are one-way and can be bundled together." xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication header for message authentication using HMAC Encapsulating security protocol (ESP) for confidentiality and/or integrity Both can be used end-to-end" xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="with original IP header inside (Tunnel) or without original IP header (Transport) mode Oakley is the IKE key determination protocol" xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="ISAKMP is the IKE key management protocol" xmpDM:startTime="552667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B Specified by NSA for use with sensitive information Ref: http://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography" xmpDM:startTime="554100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="554100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN RFC 4308: VPN-A: Older, VPN-B: Stronger" xmpDM:startTime="554500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="555233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="555233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="614767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="614767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="614767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont) SkeySeed SK is generated by D-H exchange A Pseudo Random Function (PRF) is used with SK to" xmpDM:startTime="615433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="generate all other keys Encryption Key + Integrity Key per side Þ Four keys/SA Traffic selectors specify the IP address" xmpDM:startTime="615433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="range, ports, and IP protocol type for the SA Ref: C." xmpDM:startTime="615433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Kaufman, et al, “IKEv2,” RFC 5996, September 2010" xmpDM:startTime="615433" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges HDR = IKE Header SAx1 = Offered and Chosen algorithms, DH gro u p KEx = D -" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="H Public key Nx = Nonces CERTREQ = Certificate Request IDx = Identity CERT = Certificate SK{ ." xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="..}" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="= MAC and Encrypt A UTH = Authentication SAx2 = Algorithms, parameters for IPsec S A TSx = Traffic Selectors" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="for IPsec SA N = Notify D = Delete CP = Configuration (a) Set up SA for IKE Exchanges Here" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="are my algorithms, my DH public key, my Nonce HDR, SAi, Ni Here is my chosen algorithm, my public key," xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="my nonce, acceptable Root CAs HDR, SAr1, KEr, Nr, [CertReq] Here is my ID, Traffic selectors HDR, E(SK, {IDi, [Cert]," xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="[CertReq], IDr, AUTH, SAi2, TSi, TSr}) OK." xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Here is my certificate, traffic selector HDR, E(SK, {IDr, [Cert], AUTH, SAr2, TSi, TSr}) (b) Set up other SAs Let’s" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="setup a new SA with this key and traffic selector HDR, E(SK, {[N], SA, Ni, [KEi], [TSi, TSr]}) OK, Here" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="is my nonce, key, and traffic selectors HDR, E(SK, {SA, Nr, [KEr],[TSi,TSr]}) (c) Management/Error/Other Notifications Alert! Delete/Change this SA HDR," xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="E(SK, {[N], [D], [CP], …}) Alert! Delete/Change this SA HDR, E(SK, {[N], [D], [CP], …}) Initiator Responder" xmpDM:startTime="616167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="ISAKMP Internet Security Association and Key Management Protocol Provides framework for key management Defines procedures and packet formats to establish," xmpDM:startTime="617000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="negotiate, modify, and delete SAs Independent of key exchange protocol, encryption algorithm, and authentication method Ref: http://en.wikipedia.org/wiki/Internet_Security_Association_and_Key_Management_Protocol" xmpDM:startTime="617000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="617000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges HDR = IKE Header SAx1 = Offered and Chosen algorithms, DH gro u p KEx = D -" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="H Public key Nx = Nonces CERTREQ = Certificate Request IDx = Identity CERT = Certificate SK{ ." xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="..}" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="= MAC and Encrypt A UTH = Authentication SAx2 = Algorithms, parameters for IPsec S A TSx = Traffic Selectors" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="for IPsec SA N = Notify D = Delete CP = Configuration (a) Set up SA for IKE Exchanges Here" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="are my algorithms, my DH public key, my Nonce HDR, SAi, Ni Here is my chosen algorithm, my public key," xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="my nonce, acceptable Root CAs HDR, SAr1, KEr, Nr, [CertReq] Here is my ID, Traffic selectors HDR, E(SK, {IDi, [Cert]," xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="[CertReq], IDr, AUTH, SAi2, TSi, TSr}) OK." xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Here is my certificate, traffic selector HDR, E(SK, {IDr, [Cert], AUTH, SAr2, TSi, TSr}) (b) Set up other SAs Let’s" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="setup a new SA with this key and traffic selector HDR, E(SK, {[N], SA, Ni, [KEi], [TSi, TSr]}) OK, Here" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="is my nonce, key, and traffic selectors HDR, E(SK, {SA, Nr, [KEr],[TSi,TSr]}) (c) Management/Error/Other Notifications Alert! Delete/Change this SA HDR," xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="E(SK, {[N], [D], [CP], …}) Alert! Delete/Change this SA HDR, E(SK, {[N], [D], [CP], …}) Initiator Responder" xmpDM:startTime="618267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont) SkeySeed SK is generated by D-H exchange A Pseudo Random Function (PRF) is used with SK to" xmpDM:startTime="618667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="generate all other keys Encryption Key + Integrity Key per side Þ Four keys/SA Traffic selectors specify the IP address" xmpDM:startTime="618667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="range, ports, and IP protocol type for the SA Ref: C." xmpDM:startTime="618667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Kaufman, et al, “IKEv2,” RFC 5996, September 2010" xmpDM:startTime="618667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats IKE messages= Header + one or more payloads To control retransmission of lost packets and" xmpDM:startTime="619200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="matching of request and responses Total length including header and all payloads Critical bit:0=Ignore, 1=Discard msg if payload not understood" xmpDM:startTime="619200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="619200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types = {Proposal={Protocol={Transform={Attribute}}}} = Data required to generated a session key =Errors or status = SAs that have" xmpDM:startTime="619800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="been deleted" xmpDM:startTime="619800" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN RFC 4308: VPN-A: Older, VPN-B: Stronger" xmpDM:startTime="729933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B Specified by NSA for use with sensitive information Ref: http://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography" xmpDM:startTime="840033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="840033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary IPSec provides authentication, confidentiality, and key management at Layer 3." xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Applies to all traffic." xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Security associations are one-way and can be bundled together." xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication header for message authentication using HMAC Encapsulating security protocol (ESP) for confidentiality and/or integrity Both can be used end-to-end" xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="with original IP header inside (Tunnel) or without original IP header (Transport) mode Oakley is the IKE key determination protocol" xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="ISAKMP is the IKE key management protocol" xmpDM:startTime="900733" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 20 A." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="For each of the fields in IPv4 header, indicate whether the field is immutable, mutable but predictable, or mutable (zeroed" xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="prior to ICV calculation)." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="B." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Suppose the current replay window spans from 60 to 124." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="What will the receiver do with a packet and what will the parameters of the window be if the next" xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="incoming packet has a sequence number: a." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="50 b." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="100 c." xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="150" xmpDM:startTime="996300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates In this lab, you will learn how to create public-key certificates yourself using OpenSSL." xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="You will generate 3 certificates: One for yourself as a certificate authority (CA) and then one for a Web server" xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and another for a web client Download OpenSSL Mac users: brew install openssl Windows users: http://gnuwin32.sourceforge.net/packages/openssl.htm" xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Get familiar with OpenSSL Windows users: cd to openssl directory and openssl --help Mac users: openssl --help Create a directory" xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="to store your keys and certificates Ref: Adapted from M." xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cagalj, T." xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Perkovic, &quot;Laboratory Exercises VI: SSL/TLS - Conguring Apache Server,&quot; University of Split, FESB, Croatia, June 2014, http://marjan.fesb.hr/~mcagalj/CNS/Lab/Lab6.pdf" xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1054900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 1." xmpDM:startTime="1219867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a CA certificate: Create a certificate private key using OpenSSL Hint: openssl genrsa –help We need des3 and 2048" xmpDM:startTime="1219867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="key length Remove the passphrase from yourkey.key" xmpDM:startTime="1219867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Hint: use openssl rsa --help Create a self-signed certificate for yourself as a CA Hint: use openssl req --help We" xmpDM:startTime="1219867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="need --x509 option and --day 999 plus some others" xmpDM:startTime="1219867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 2." xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a Certificate for a Server Create a private key for the localhost server Use openssl genrsa --help Options: des3," xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="password, output key Remove the passphrase from the key." xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a certificate signing request (CSR) for the created key Hint: openssl req --help Create a certificate for the localhost" xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="server Hint: Edit openssh.cnf" xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="file to reflect your directory (certificate locations) openssl ca -day … -in (your CSR) -out (your.crt)" xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="-keyfile (CA key) –cert (CA cert) –policy policy_anything" xmpDM:startTime="1224533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 3." xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a certificate for a client Repeat all steps for part 2 for for the client Create private key for" xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a client Remove passphrase Create CSR for the client." xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create client certificate." xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Export the SSL client certificate in PKCS12 format Hint: openssl pkcs12 --help You need the options for each of the" xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="following: password, input certificate file (client), input key (client), certificate generated and the output PKCS12 file" xmpDM:startTime="1227133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 2." xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a Certificate for a Server Create a private key for the localhost server Use openssl genrsa --help Options: des3," xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="password, output key Remove the passphrase from the key." xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a certificate signing request (CSR) for the created key Hint: openssl req --help Create a certificate for the localhost" xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="server Hint: Edit openssh.cnf" xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="file to reflect your directory (certificate locations) openssl ca -day … -in (your CSR) -out (your.crt)" xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="-keyfile (CA key) –cert (CA cert) –policy policy_anything" xmpDM:startTime="1229867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 1." xmpDM:startTime="1230133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a CA certificate: Create a certificate private key using OpenSSL Hint: openssl genrsa –help We need des3 and 2048" xmpDM:startTime="1230133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="key length Remove the passphrase from yourkey.key" xmpDM:startTime="1230133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Hint: use openssl rsa --help Create a self-signed certificate for yourself as a CA Hint: use openssl req --help We" xmpDM:startTime="1230133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="need --x509 option and --day 999 plus some others" xmpDM:startTime="1230133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 2." xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a Certificate for a Server Create a private key for the localhost server Use openssl genrsa --help Options: des3," xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="password, output key Remove the passphrase from the key." xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a certificate signing request (CSR) for the created key Hint: openssl req --help Create a certificate for the localhost" xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="server Hint: Edit openssh.cnf" xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="file to reflect your directory (certificate locations) openssl ca -day … -in (your CSR) -out (your.crt)" xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="-keyfile (CA key) –cert (CA cert) –policy policy_anything" xmpDM:startTime="1233400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) 3." xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create a certificate for a client Repeat all steps for part 2 for for the client Create private key for" xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="a client Remove passphrase Create CSR for the client." xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Create client certificate." xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Export the SSL client certificate in PKCS12 format Hint: openssl pkcs12 --help You need the options for each of the" xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="following: password, input certificate file (client), input key (client), certificate generated and the output PKCS12 file" xmpDM:startTime="1234200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Acronyms AH Authentication Header DA Destination Address DH Diffie-Hellman DoS Denial of Service ESP Encapsulating Security Payload HMAC Hybrid Message" xmpDM:startTime="1235033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Authentication Code ICV Integrity Check Value IETF Internet Engineering Task Force IKE Internet Key Exchange IKEv2 Internet Key Exchange version" xmpDM:startTime="1235033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="2 IP Internet Protocol IPSec Internet Protocol Security IPv4 Internet Protocol version 4 IPv6 Internet Protocol version 6 ISAKMP Internet" xmpDM:startTime="1235033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Security Association and Key Management Protocol MIB Management Information Base" xmpDM:startTime="1235033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Acronyms (Cont) MTU Maximum Transmission Unit NSA National Security Agency RFC Request for Comments SA Source Address SPI Security Parameters" xmpDM:startTime="1369533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Index TCP Transmission Control Protocol TTL Time to Live UDP User Datagram Protocol VPN Virtual Private Network" xmpDM:startTime="1369533" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Scan This to Download These Slides Raj Jain http://rajjain.com" xmpDM:startTime="1370100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1370100" xmpDM:duration="1000"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="TableOfContents" xmpDM:frameRate="f1000" xmpDM:trackName="Table of Contents">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges" xmpDM:startTime="0" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="0" tscDM:imageoffset="0" tscDM:imagerect="0, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont)" xmpDM:startTime="46367" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="1" tscDM:imageoffset="0" tscDM:imagerect="75, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges" xmpDM:startTime="189133" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="2" tscDM:imageoffset="0" tscDM:imagerect="150, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont)" xmpDM:startTime="193667" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="3" tscDM:imageoffset="0" tscDM:imagerect="225, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="294300" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="4" tscDM:imageoffset="0" tscDM:imagerect="300, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="449033" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="5" tscDM:imageoffset="0" tscDM:imagerect="375, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="467733" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="6" tscDM:imageoffset="0" tscDM:imagerect="450, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="472200" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="7" tscDM:imageoffset="0" tscDM:imagerect="525, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="473300" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="8" tscDM:imageoffset="0" tscDM:imagerect="600, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="476133" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="9" tscDM:imageoffset="0" tscDM:imagerect="675, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="478800" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="10" tscDM:imageoffset="0" tscDM:imagerect="750, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="506400" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="11" tscDM:imageoffset="0" tscDM:imagerect="825, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN" xmpDM:startTime="545533" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="12" tscDM:imageoffset="0" tscDM:imagerect="900, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B" xmpDM:startTime="548433" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="13" tscDM:imageoffset="0" tscDM:imagerect="975, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary" xmpDM:startTime="552667" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="14" tscDM:imageoffset="0" tscDM:imagerect="1050, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B" xmpDM:startTime="554100" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="15" tscDM:imageoffset="0" tscDM:imagerect="1125, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN" xmpDM:startTime="554500" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="16" tscDM:imageoffset="0" tscDM:imagerect="1200, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="555233" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="17" tscDM:imageoffset="0" tscDM:imagerect="1275, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="614767" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="18" tscDM:imageoffset="0" tscDM:imagerect="1350, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont)" xmpDM:startTime="615433" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="19" tscDM:imageoffset="0" tscDM:imagerect="1425, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges" xmpDM:startTime="616167" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="20" tscDM:imageoffset="0" tscDM:imagerect="1500, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="ISAKMP" xmpDM:startTime="617000" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="21" tscDM:imageoffset="0" tscDM:imagerect="1575, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEV2 Exchanges" xmpDM:startTime="618267" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="22" tscDM:imageoffset="0" tscDM:imagerect="1650, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKEv2 Exchanges (Cont)" xmpDM:startTime="618667" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="23" tscDM:imageoffset="0" tscDM:imagerect="1725, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Header and Payload Formats" xmpDM:startTime="619200" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="24" tscDM:imageoffset="0" tscDM:imagerect="1800, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="IKE Payload Types" xmpDM:startTime="619800" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="25" tscDM:imageoffset="0" tscDM:imagerect="1875, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: VPN" xmpDM:startTime="729933" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="26" tscDM:imageoffset="0" tscDM:imagerect="1950, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cryptographic Suites: NSA Suite B" xmpDM:startTime="840033" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="27" tscDM:imageoffset="0" tscDM:imagerect="2025, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Summary" xmpDM:startTime="900733" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="28" tscDM:imageoffset="0" tscDM:imagerect="2100, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Homework 20" xmpDM:startTime="996300" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="29" tscDM:imageoffset="0" tscDM:imagerect="2175, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates" xmpDM:startTime="1054900" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="30" tscDM:imageoffset="0" tscDM:imagerect="2250, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont)" xmpDM:startTime="1219867" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="31" tscDM:imageoffset="0" tscDM:imagerect="2325, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) " xmpDM:startTime="1224533" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="32" tscDM:imageoffset="0" tscDM:imagerect="2400, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont)" xmpDM:startTime="1227133" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="33" tscDM:imageoffset="0" tscDM:imagerect="2475, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) " xmpDM:startTime="1229867" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="34" tscDM:imageoffset="0" tscDM:imagerect="2550, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont)" xmpDM:startTime="1230133" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="35" tscDM:imageoffset="0" tscDM:imagerect="2625, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont) " xmpDM:startTime="1233400" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="36" tscDM:imageoffset="0" tscDM:imagerect="2700, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Lab 20: Create Certificates (Cont)" xmpDM:startTime="1234200" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="37" tscDM:imageoffset="0" tscDM:imagerect="2775, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Acronyms" xmpDM:startTime="1235033" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="38" tscDM:imageoffset="0" tscDM:imagerect="2850, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name=" Acronyms (Cont)" xmpDM:startTime="1369533" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="39" tscDM:imageoffset="0" tscDM:imagerect="2925, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Scan This to Download These Slides" xmpDM:startTime="1370100" tscDM:image="l_20ips3_Thumbnails.png" tscDM:imageindex="40" tscDM:imageoffset="0" tscDM:imagerect="3000, 0, 75, 56"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
            </rdf:Bag>
         </xmpDM:Tracks>
         <tscDM:controller>
            <rdf:Description xmpDM:name="tscplayer">
               <tscDM:parameters>
                  <rdf:Bag>
                     <rdf:li xmpDM:name="autohide" xmpDM:value="false"/><rdf:li xmpDM:name="autoplay" xmpDM:value="true"/><rdf:li xmpDM:name="loop" xmpDM:value="false"/><rdf:li xmpDM:name="searchable" xmpDM:value="true"/><rdf:li xmpDM:name="captionsenabled" xmpDM:value="false"/><rdf:li xmpDM:name="sidebarenabled" xmpDM:value="false"/><rdf:li xmpDM:name="unicodeenabled" xmpDM:value="false"/><rdf:li xmpDM:name="backgroundcolor" xmpDM:value="000000"/><rdf:li xmpDM:name="sidebarlocation" xmpDM:value="left"/><rdf:li xmpDM:name="endaction" xmpDM:value="stop"/><rdf:li xmpDM:name="endactionparam" xmpDM:value="true"/><rdf:li xmpDM:name="locale" xmpDM:value="en-US"/></rdf:Bag>
               </tscDM:parameters>
               <tscDM:controllerText>
                  <rdf:Bag>
                  </rdf:Bag>
               </tscDM:controllerText>
            </rdf:Description>
         </tscDM:controller>
         <tscDM:contentList>
            <rdf:Description>
               <tscDM:files>
                  <rdf:Seq>
                     <rdf:li xmpDM:name="0" xmpDM:value="l_20ips3.mp4"/><rdf:li xmpDM:name="1" xmpDM:value="l_20ips3_First_Frame.png"/><rdf:li xmpDM:name="2" xmpDM:value="l_20ips3_Thumbnails.png"/></rdf:Seq>
               </tscDM:files>
            </rdf:Description>
         </tscDM:contentList>
      </rdf:Description>
   </rdf:RDF>
</x:xmpmeta>