Oakley
A protocol for establishing session keys on Internet hosts and routers. Oakley provides perfect forward secrecy. It can be used with ISAKMP or by itself if attribute negotiation is not needed. Oakley describes a series of key exchanges - called 'modes'-- and details the services provided by each (e.g. perfect forward secrecy for keys, identity protection, and authentication).