DRAG DROP [Network Security] Drag and drop the VPN functions from the left onto the description on the right.

SHA-1 (Secure Hash Algorithm 1) is a hashing algorithm used to generate a unique digest of a message. In VPNs (specifically IPsec), it is used within HMAC to verify that data has not been altered during transit, ensuring data integrity.

ISAKMP (Internet Security Association and Key Management Protocol) provides the framework for authentication and key exchange. It defines the procedures and packet formats to establish, negotiate, modify, and delete Security Associations (SAs), effectively defining IKE SAs.

AES (Advanced Encryption Standard) is a symmetric key encryption algorithm. It encrypts the data payload, rendering it unreadable to unauthorized users, which ensures data confidentiality.

RSA (Rivest-Shamir-Adleman) is an asymmetric algorithm often used for digital signatures. In the IKE phase, peers use RSA signatures to prove their identities to one another, providing authentication.

IETF RFC 2408, Internet Security Association and Key Management Protocol (ISAKMP), Section 1: "ISAKMP defines the procedures for authenticating a communicating peer, creation and management of Security Associations, key generation techniques, and threat mitigation."

NIST Special Publication 800-77 Rev. 1, Guide to IPsec VPNs, Section 2.2.1: Discusses how encryption algorithms like AES provide confidentiality. Section 2.2.2: Describes how hash functions (e.g., SHA) are used to provide data integrity.

Cisco Systems, IPsec Configuration Guide, "IKEv1 and IKEv2 Packet Exchange": Details the use of RSA signatures for the authentication method during IKE phase 1 negotiations.

Stallings, W., Cryptography and Network Security: Principles and Practice, 7th Edition, Pearson. Chapter 19 (IP Security): Explains the role of ISAKMP in defining the SA management and the use of HMAC-SHA for integrity.