Re: [IPsec] I-D Action: draft-ietf-ipsecme-ikev2-intermediate-02.txt

["Valery Smyslov" <[e-mail]>]

Hi,

a new version of the IKE_INTERMEDIATE draft is published.

The way authentication data is calculated is changed
as a result of a private conversation with one of implementers.
Now the size of the crypto-related stuff (IV, ICV, padding)
is no more included into the calculation (note, that the stuff
itself wasn't included before, but its size was, and it was wrong).

Please, review.

Regards,
Valery.


> A New Internet-Draft is available from the on-line Internet-Drafts
directories.
> This draft is a work item of the IP Security Maintenance and Extensions WG
of
> the IETF.
> 
>         Title           : Intermediate Exchange in the IKEv2 Protocol
>         Author          : Valery Smyslov
> 	Filename        : draft-ietf-ipsecme-ikev2-intermediate-02.txt
> 	Pages           : 11
> 	Date            : 2019-07-24
> 
> Abstract:
>    This documents defines a new exchange, called Intermediate Exchange,
>    for the Internet Key Exchange protocol Version 2 (IKEv2).  This
>    exchange can be used for transferring large amount of data in the
>    process of IKEv2 Security Association (SA) establishment.
>    Introducing Intermediate Exchange allows re-using existing IKE
>    Fragmentation mechanism, that helps to avoid IP fragmentation of
>    large IKE messages, but cannot be used in the initial IKEv2 exchange.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-intermediate/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-ipsecme-ikev2-intermediate-02
>
https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-intermediate-
> 02
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-ipsecme-ikev2-intermediate-02
> 
> 
> Please note that it may take a couple of minutes from the time of
submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> IPsec mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/ipsec