Re: [apps-discuss] apps-review team review of draft-ietf-csi-hash-threat-10

Suresh Krishnan <suresh.krishnan@ericsson.com> Mon, 18 October 2010 14:20 UTC

Message-ID: <4CBC5784.8020500@ericsson.com>
Date: Mon, 18 Oct 2010 10:19:48 -0400
From: Suresh Krishnan <suresh.krishnan@ericsson.com>
User-Agent: Thunderbird 2.0.0.24 (X11/20100411)
MIME-Version: 1.0
To: Barry Leiba <barryleiba@computer.org>
References: <AANLkTikR5bcd31Rs3uTRAnf_YCEeJ=rXMzNJ6vEFqQK+@mail.gmail.com>
In-Reply-To: <AANLkTikR5bcd31Rs3uTRAnf_YCEeJ=rXMzNJ6vEFqQK+@mail.gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: "draft-ietf-csi-hash-threat.all@tools.ietf.org" <draft-ietf-csi-hash-threat.all@tools.ietf.org>, "apps-discuss@ietf.org" <apps-discuss@ietf.org>
Subject: Re: [apps-discuss] apps-review team review of draft-ietf-csi-hash-threat-10
Precedence: list

Hi Barry,
   Thanks for the review.

On 10-10-16 09:09 AM, Barry Leiba wrote:
> Minor Issues:
> In section 3.3, you say "Since the structure of the Neighbor Discovery
> messages is well defined, it is not possible to use this vulnerability
> in real world attacks."  That's a strong statement, and it might be
> *possible* to find a usable hash collision, however unlikely that may
> be.  I'd say "not practical", instead.  But this is such a small point
> that it hardly matters.

Good catch. We will make this change.

Thanks
Suresh

[apps-discuss] apps-review team review of draft-i… Barry Leiba
Re: [apps-discuss] apps-review team review of dra… Suresh Krishnan