[Ipsec] Protocol Action: 'IKE and IKEv2 Authentication Using ECDSA' to Proposed Standard

The IESG writes:
> The IESG has approved the following document:
> 
> - 'IKE and IKEv2 Authentication Using ECDSA '
>     <draft-ietf-ipsec-ike-auth-ecdsa-06.txt> as a Proposed Standard
> 
> Note to IANA
> 
>    The registry is http://www.iana.org/assignments/ipsec-registry [IANA-IKE],
>    and the section within the registry is "IPSEC Authentication Methods".
>    The three new additions are:
> 
>       Method                                        Value
>       ------                                        -----
>       ECDSA with SHA-256 on the P-256 curve           9
>       ECDSA with SHA-384 on the P-384 curve          10
>       ECDSA with SHA-521 on the P-512 curve          11
> 
>    The registry is http://www.iana.org/assignments/ikev2-parameters
>    [IANA-IKEv2], and the section within the registry is "IKEv2
>    Authentication Method".  The three new additions are:
> 
>       Method                                        Value
>       ------                                        -----
>       ECDSA with SHA-256 on the P-256 curve           9
>       ECDSA with SHA-384 on the P-384 curve          10
>       ECDSA with SHA-521 on the P-512 curve          11

As the currently allocated numbers in the IKEv2-parameters for the
"IKEv2 Authentication Method" are completely different that IKEv1, and
the first unallocated number in that registry is 4, I think it would
be much better to simply take next available numbers (i.e. 4, 5, and
6) instead of the proposed numbers, which would leave a gap of 4-8 to
the registry. This also affects the hex encoded packet examples in the
section 8. 
-- 
kivinen@safenet-inc.com

_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec