Inventors:
Santanu Sinha - Cupertino CA, US
Kenneth William Batcher - Hudson OH, US
Assignee:
Cisco Technology, Inc. - San Jose CA
International Classification:
H04L 29/00
US Classification:
713151, 713150, 713152, 713158, 713160, 713168, 726 2, 726 13, 726 14, 380274, 380249, 380270, 380277, 709227, 709228, 709229
Abstract:
A dual cryptographic keying system. In particular implementations, a method includes responsive to an initial session key negotiation, storing security association information for a tunnel in a security association memory; responsive to a session key renegotiation, storing security association information for the tunnel in a cache; decrypting received packets associated with the tunnel conditionally using the security association information in the cache or the security association information in the security association memory; and upon an expiration condition, overwriting the security association information, for the tunnel, in the security association memory with the security association information, for the tunnel, copied from the cache.