IPSEC-PIB as mechanism for key distribution

["Félix J.García Clemente" <fgarcia@xxxxxxxxx>]

Hello all,
IPSEC-PIB has several attributes to specify keys. The attribute
ipSecXXTransformIntegrityKey specifies the integrity key to be used and
the attribute ipSecEspTransformCipherKey specifies the cipher key to be
used. And the attribute ipSecIkeAssociationPresharedKey contains the
pre-shared key.
It means that IPSEC-PIB is used to distribute keys, doesn't it?.

I have noted that the keys don't have a specific class where can be
defined (for example ipSecSharedSecret) and then they must be specified
in other classes and it is not possible to reference them.
Even the keys are transported by PIB in plaintext. Maybe an attribute
similar to 'Algorithm' of the class CIM_SharedSecret may be useful to
protect the keys.
Maybe it can be interesting in a future draft. What do you think?

Regards,
Félix