IETF Logo Mail Archive

Re: [Gen-art] Gen-ART review of draft-ietf-mpls-gach-adv-06

Stewart Bryant <stbryant@cisco.com> Fri, 26 April 2013 23:07 UTC

Return-Path: <stbryant@cisco.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39FBF21F993F for <gen-art@ietfa.amsl.com>; Fri, 26 Apr 2013 16:07:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.544
X-Spam-Level:
X-Spam-Status: No, score=-110.544 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EhofUXkiv4nx for <gen-art@ietfa.amsl.com>; Fri, 26 Apr 2013 16:07:14 -0700 (PDT)
Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id A0ED421F9909 for <gen-art@ietf.org>; Fri, 26 Apr 2013 16:07:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1053; q=dns/txt; s=iport; t=1367017635; x=1368227235; h=message-id:date:from:reply-to:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=iMeYd8nxVf8zUyWb+wUn3nR3P+XYXTULb1jf64/9QyE=; b=ABB6TyaZPsKJyxHgH8xB42v5+vXUpBAgotTY5aS4OyneDWAiD6S2nbe+ 4jn4kj07wi5LCe1Dgslln549+/ZkfKxY32R51L9LrOvbAbKov5cgF1dDk jbymMju31+CH7nJYJe7YsZ/MyRHXTF5S/xoewnIOtY/v51YuVhHH9yFyA g=;
X-IronPort-AV: E=Sophos;i="4.87,561,1363132800"; d="scan'208";a="13131416"
Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-3.cisco.com with ESMTP; 26 Apr 2013 23:07:14 +0000
Received: from cisco.com (mrwint.cisco.com [64.103.70.36]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r3QN7BR9014373 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 26 Apr 2013 23:07:12 GMT
Received: from [IPv6:::1] (localhost [127.0.0.1]) by cisco.com (8.14.4+Sun/8.8.8) with ESMTP id r3QN7APC019931; Sat, 27 Apr 2013 00:07:10 +0100 (BST)
Message-ID: <517B089E.4060901@cisco.com>
Date: Sat, 27 Apr 2013 00:07:10 +0100
From: Stewart Bryant <stbryant@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: Martin Thomson <martin.thomson@gmail.com>
References: <CABkgnnW-53MVHZaW4QweqBjrPGCrP=fCNQ+LJdaG__ePh2tn1A@mail.gmail.com> <CABkgnnXOcDRkp=6e8aDdhTbk+s=hkR2wCkXoJcWGn8sjrRi2cg@mail.gmail.com> <517ABCF0.2080701@cisco.com> <CABkgnnX7H_y1cV4O+k4OcmB1bqkTB3iu+uvzec6Ura89W-JQSQ@mail.gmail.com>
In-Reply-To: <CABkgnnX7H_y1cV4O+k4OcmB1bqkTB3iu+uvzec6Ura89W-JQSQ@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: "Bocci, Matthew (Matthew)" <matthew.bocci@alcatel-lucent.com>, "gen-art@ietf.org" <gen-art@ietf.org>, danfrost@cisco.com, draft-ietf-mpls-gach-adv.all@tools.ietf.org, sec-ads@tools.ietf.org
Subject: Re: [Gen-art] Gen-ART review of draft-ietf-mpls-gach-adv-06
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: stbryant@cisco.com
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/gen-art>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Apr 2013 23:07:16 -0000

On 26/04/2013 19:45, Martin Thomson wrote:
> On 26 April 2013 10:44, Stewart Bryant <stbryant@cisco.com> wrote:
>> Section 6.3 now says
>>
>> The HMAC proceedure described in [RFC2104] is used to compute the hash.
> s/proceedure/procedure/
>
>> The hash is computed over the entire GAP message as shown in Fig1.
> What value does the Authentication TLV have when it is input to the HMAC?
Sorry missed that - zero - will address in the inevitable next version.

Stewart
>
>> The length of the Authentication Data field is always less than or equal
>> to the message digest size of the specific hash function that is being
>> used, however the implementer needs to consider that although this
>> decreases the size of the message, it results in a corresponding
>> reduction in the strength of the assurance provided.
>> Hash truncation is not RECOMMENDED.
> This last part could probably be a new paragraph.
> .
>


-- 
For corporate legal information go to:

http://www.cisco.com/web/about/doing_business/legal/cri/index.html

v2.23.0 | Report a Bug | By Email