Re: [Hipsec] HIP parameters critical flag

[Robert Moskowitz <[e-mail]>]

oops on that last transmit.  I "blame" it on a new install with a new 
version of Thunderbird....  Right...

On 01/12/2010 11:56 AM, Ahrenholz, Jeffrey M wrote:
>> Again, I'd say make the value 715 if you plan to include it
>> in ENCRYPTED, otherwise you may want to leave that value open
>> for future parameters to be included in ENCRYPTED.
>>      
> looking more carefully at that previous message, I guess there is no ENCRYPTED in the I1 packet that will include this info:
>
>    "I1 packet has to be modified to include the hash, public keys and
>    diffie-hellman algorithms supported by the Initiator in a new "algo"
>    parameter.  The parameter should indicate which hash and public key
>    algorithm the Initiator used to generate its HIT."
>    

And thus a new downgrade attack that we need to mitigate.  And Tobias 
figured it out better than I did, so he gets to present it!