Re: [IPsec] Virtual interim about re-designing ESP?

Daniel Migault <mglt.ietf@gmail.com> Tue, 22 November 2022 22:16 UTC

Return-Path: <mglt.ietf@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 893EEC14CE31 for <ipsec@ietfa.amsl.com>; Tue, 22 Nov 2022 14:16:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.094
X-Spam-Level:
X-Spam-Status: No, score=-7.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rqUE6zm7SsNx for <ipsec@ietfa.amsl.com>; Tue, 22 Nov 2022 14:16:20 -0800 (PST)
Received: from mail-oa1-x2a.google.com (mail-oa1-x2a.google.com [IPv6:2001:4860:4864:20::2a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6296BC14CE29 for <ipsec@ietf.org>; Tue, 22 Nov 2022 14:16:20 -0800 (PST)
Received: by mail-oa1-x2a.google.com with SMTP id 586e51a60fabf-141ca09c2fbso18872998fac.6 for <ipsec@ietf.org>; Tue, 22 Nov 2022 14:16:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=11Z3lkT/kzMZVpFA/9VCAWhqei9zpH2FwnqkVyO/P3w=; b=hEVB09xQJWrZzdnFoZAckXo/IOBkbxbB35aBJpQvnFdZMjpk/ftBR9pOtCbQkOqUDF UvSkTOecEt2BI61HG/5ZLtD6oZ//6NTd6Iur9Gk9yQJa+pujG3HYyBPe80rU+jM1XnuL 0CtJODDLzovCSEtIOA/yxH4bj0SdIHrnQVB5ASv3p631mz+TmFl2wH8iDHIvC/PiINSw YEaxk8Zd6oMeHBP0Z1n3kiEzgQLDMImilqXt4czvKrkio+W8aqSpbsBQj+igiqyYNwDq nqDYVREmDfGcv+oO8g2o+a/HEkprod0/tPz3BFnAj0txqh2GXGMTC8FNh09i0ubhbCCf FIyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=11Z3lkT/kzMZVpFA/9VCAWhqei9zpH2FwnqkVyO/P3w=; b=A9YO+jS+DXQe/iIF4jcJAWFee9lPNAeqSeUUTgcbQfvjdDiyii3Ez0GmQOcwCBgKyh Zc5yDgsLapmI5ZDQb2XaMjSJzfWqjbpwEoaV0qjghoFKFKB8OVAeGu3SQq3PkPwERWPg ZUec9ONGT0plxtyhZNhw7ubsVrNHDvs3BllKLU/O0tptCeJH1KbH1KokZcseBNQ87QlW 5nBcJMVzGkegIE835gVS5PmD+XMM4oBTNdgrkl1WO1v1cfvjyRL3AGaIZvYsTb0IzZDH HSb7hdMsEfAnjX98pzfgi7n2ctXyqX0/YF8w4/a+sChNzm8OM4zPyOBY4X457YorvEcb Av2A==
X-Gm-Message-State: ANoB5pnAFPLpvmukfTZ6FUsRYFnTBpgMijt5BexB5q9na/rQnlPZQ7is S1JloUQJAlKJVzUYce423dWS37alTrGfsy+d2RQ=
X-Google-Smtp-Source: AA0mqf4H+4BRogAxbxMi77DLxKwVYSEEtJxqrAc/CMAkrPPX0JQGtLjq7fXp7b3pfGG3aP1cxPwHX74kp2490JRH4zc=
X-Received: by 2002:a05:6870:591:b0:13b:bbbb:1623 with SMTP id m17-20020a056870059100b0013bbbbb1623mr6869374oap.115.1669155379603; Tue, 22 Nov 2022 14:16:19 -0800 (PST)
MIME-Version: 1.0
References: <20221121124714.GA704954@gauss3.secunet.de> <CAGL5yWYbFLh4BXmy2QPKd8=P-Jd9ERXheK7M_dDfbZTGACPWew@mail.gmail.com> <4241.1669154378@localhost>
In-Reply-To: <4241.1669154378@localhost>
From: Daniel Migault <mglt.ietf@gmail.com>
Date: Tue, 22 Nov 2022 17:16:08 -0500
Message-ID: <CADZyTknznY54J_8Z-PF8Uz_LVx4u2Va_3qXmmELysY0Vgn4XwA@mail.gmail.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Cc: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, Steffen Klassert <steffen.klassert@secunet.com>, ipsec@ietf.org
Content-Type: multipart/alternative; boundary="00000000000079ed2b05ee1685e4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/VK5QaHTwX0Mk6qt8RE9bKWiEsq4>
Subject: Re: [IPsec] Virtual interim about re-designing ESP?
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Nov 2022 22:16:22 -0000

I support Bob's suggestion.
I also believe that multicore will be addressed by design. I do want to
have some mechanisms like [1] to be included by design. That said, I would
like [1] to start on ESPv3 and take the output back to ESPv-4 as opposed to
waiting for ESP-v4.

Interims are free, we can be flexible and have a mix of presentations /
discussions.

Yours,
Daniel

[1] ponchon-ipsecme-anti-replay-subspaces-00
<https://datatracker.ietf.org/doc/draft-ponchon-ipsecme-anti-replay-subspaces/>


On Tue, Nov 22, 2022 at 4:59 PM Michael Richardson <mcr+ietf@sandelman.ca>
wrote:

>
> Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org> wrote:
>     >> - How should the problems be solved?
>     >>
>
>     > Once we have a list, I think we can come up with plans to tweak ESP
> to
>     > tick off our list items.
>
>     > I do think we need some short presentations for an interim. Just
> having
>     > a free flow discussion will probably not be very useful.
>
> We need a candidate list of items, then a slide / github issue per item,
> and
> then we need to discuss enough such that all people have a deep
> understanding
> of that item.
>
> It could be that we have items which were duplicate, and it could also be
> that we have goals which are really two goals.
>
> {I think we are in complete agreement about how such a virtual interim
> should go}
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>
>
>
>
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec
>


-- 
Daniel Migault
Ericsson