FYI: Multicast Key Management documents

Ran Atkinson <rja@cisco.com> Mon, 09 September 1996 17:23 UTC

Received: from ietf.org by ietf.org id aa01253; 9 Sep 96 13:23 EDT
Received: from cnri by ietf.org id aa01249; 9 Sep 96 13:23 EDT
Received: from neptune.hq.tis.com by CNRI.Reston.VA.US id aa10518; 9 Sep 96 13:23 EDT
Received: from neptune.tis.com by neptune.TIS.COM id aa13270; 9 Sep 96 12:58 EDT
Sender: ietf-archive-request@ietf.org
From: Ran Atkinson <rja@cisco.com>
Date: Mon, 09 Sep 1996 09:52:26 -0700
X-Mailer: Mail User's Shell (7.2.5 10/14/92)
To: ipsec@tis.com
Subject: FYI: Multicast Key Management documents
X-Orig-Sender: ipsec-approval@neptune.tis.com
Precedence: bulk
Message-ID: <9609091253.aa13265@neptune.TIS.COM>

	There are a number of documented approaches to multicast key
management that this group should consider.  Ones that have not been marketed
very aggressively include:

        Group Key Management Protocol (GKMP), developed by SPARTA under
                ARPA sponsorship circa 1994 based on technology that
                dates back somewhat before 1994.  This has
                some proof-of-concept code written under the ARPA
                sponsorship.  This was presented at the December 1994
                IETF in San Jose and has current Internet-Drafts online
                as:
                
                draft-harney-gkmp-arch-01.txt
                draft-harney-gkmp-spec-01.txt

                and will be moving to RFC in the near future.

        Scalable Multicast Key Distribution, developed by Tony Ballardie,
                and described in RFC-1949.

	The above have significantly different technology approaches.  Both of
these approaches will work well not only with multicasting but also with RSVP
and are worth careful review and consideration.

	I'm told that work is underway at several places (e.g. ORNL) on a
PF_KEY-based freely distributable implementation of GKMP technology inside the
ISAKMP framework.

Ran
rja@cisco.com


--