Efficient Analysis Method for IKEv2/IPsec Traffic Visibility: Applications on Mobile Platforms

In this paper, we propose an efficient method to enhance the visibility of IKEv2/IPsec encrypted traffic. Wireshark is currently the only tool capable of decrypting IKEv2/IPsec traffic, but it requires multiple session keys and manual processing. Our method addresses these limitations by automating the retrieval of the key seed, reducing the required key data, and simplifying the analysis process. We apply the proposed method in a real mobile environment to evaluate the security of Android and iOS devices with built-in VPN apps. The evaluation results confirm that both platforms adhere to strong cryptographic standards. These results demonstrate that the proposed method not only improves the visibility of IKEv2/IPsec traffic but also provides a reliable assessment of mobile VPN security.