In IPsec, which component provides data integrity and authentication?

In IPsec, which component provides data integrity and authentication?

• A. Encapsulating Security Payload (ESP)
• B. Internet Key Exchange (IKE)
• C. IKEv2
• D. Authentication Header

Answer: (D)

In IPsec, data integrity and authentication are provided by a header that protects the authenticity of the packet and detects any tampering. IPsec has two main protocols: one focuses on encryption (confidentiality) and can offer optional integrity, while the other is specifically designed to ensure integrity and authentication of the entire IP packet. The component that guarantees data integrity and authenticates the source without encrypting the payload is the Authentication Header, which carries an Integrity Check Value computed over the packet. The other elements—Encapsulating Security Payload focuses on encryption (with optional integrity) and IKE/IKEv2 handle negotiating keys and security associations, not per-packet integrity.

In IPsec, data integrity and authentication are provided by a header that protects the authenticity of the packet and detects any tampering. IPsec has two main protocols: one focuses on encryption (confidentiality) and can offer optional integrity, while the other is specifically designed to ensure integrity and authentication of the entire IP packet. The component that guarantees data integrity and authenticates the source without encrypting the payload is the Authentication Header, which carries an Integrity Check Value computed over the packet. The other elements—Encapsulating Security Payload focuses on encryption (with optional integrity) and IKE/IKEv2 handle negotiating keys and security associations, not per-packet integrity.