Ipsec encryption key when using digital certs

Hi Guys,

I understand that when using pre shared keys, DH uses pre shared keys to
derive the shared secret key to encrypt/decrypt . Can I clarify how does
the secret key is derived using DH when using digital certs?
In case of digital certs since we are generating a key pair locally, is the
private key from this key pair is used in DH algo to generate a seperate
secret key? offcourse the key pair is also meant to generate a digital cert
request (authentication only).

Regards,
Ajay

Blogs and organic groups at http://www.ccie.net
Received on Sat Apr 14 2012 - 13:54:06 ART