RE: ISAKMP/Oakley resolution draft question
Greg Carter <greg.carter@entrust.com> Fri, 05 September 1997 13:33 UTC
Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id JAA28793 for ipsec-outgoing; Fri, 5 Sep 1997 09:33:51 -0400 (EDT)
Message-ID: <c=CA%a=_%p=NorTel_Secure_Ne%l=APOLLO-970905133829Z-36479@mail.entrust.com>
From: Greg Carter <greg.carter@entrust.com>
To: "'ipsec@tis.com'" <ipsec@tis.com>, "'isakmp-oakley@cisco.com'" <isakmp-oakley@cisco.com>, "'smamros@newoak.com'" <smamros@newoak.com>
Subject: RE: ISAKMP/Oakley resolution draft question
Date: Fri, 05 Sep 1997 09:38:29 -0400
X-Mailer: Microsoft Exchange Server Internet Mail Connector Version 4.0.993.5
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-ipsec@ex.tis.com
Precedence: bulk
>Is this correct? If so, then how does one calculate the IV required >for the first Quick Mode message after using Aggressive Mode, given >that there will be no CBC output block from phase 1 (see appendix B)? I can't comment on whether it is correct or not, but here is what I do: I initialize the buffer which is supposed to be the last CBC block with N bytes, where N is the Block size, of the phase one calculated IV (using the method described in appendix B, 5th or 6th paragraph). Then my Quick Mode IV generation treats it as though it were the last CBC block. Since both sides know the value everything works out. Bye. ---- Greg Carter, Entrust Technologies greg.carter@entrust.com Get FREE 128-bit FIPS-140-1 Validated Crypto for the desktop http://www.entrust.com/solo.htm >
- ISAKMP/Oakley resolution draft question Shawn Mamros
- RE: ISAKMP/Oakley resolution draft question Greg Carter
- Re: ISAKMP/Oakley resolution draft question Daniel Harkins