Comments on ISAKMP/Oakley

[Naganand Doraswamy <[e-mail]>]

These are mostly implemetation type comments:

2.4.1. Security Association Payload
   Is the "Payload Length" field *really* supposed to be specified in
   four-octet units, or should it be in octets as all the other payloads
   are?


A.6.1. Attribute Value Assigned Numbers, IPSEC ESP
   TLV constructs: how long is "Type"?  How long is "Length"?  Is "Length"
   in terms of octets, or some other unit?  Are the lengths of "Type" and
   "Length" included in "Length" or not?

   Where is "Multiple Precision Integer" specified?

A.7.1 The basic proposal format does has the following fields defined in the
header:
       - Proposal #, Proposal Len, Protocol # and Attribute TLV's
   However, the ESP, AH, and ISAKMP proposals have defined the Transforms ID's  
   and a reserved field. Shouldnt the basic proposal format take care of
this as 
   well?

A.7.4. Proposal Formats, ISAKMP: ???


A.8.1. Security Association Payload Format
   Does the Situation field length need to be an integral multiple of
   four octets, as the Proposal field needs to be?  Is the Situation Length
   field (Figure 20) specified as octets, four-octet units, or ... ?


draft-ietf-ipsec-isakmp-oakley-00.txt

Where are ISAKMP exchange numbers defined for the various Oakley modes?
What happens to the Base, Identity Protection, and Authentication Only
exchanges defined in the ISAKMP draft?  How does one implemement the other
exchanges (which are defined as MUSTs in the ISAKMP draft) if Oakley is
the only supported key exchange and is there any need to implement the basic
ISAKMP modes if one is supporting only key exchange for IPSEC?

5.1 Oakley Main Mode

   Oakley Main Mode looks a lot like the Identity Protection exchange from
   the ISAKMP draft, except that the Envelope is missing in all transactions,
   a Nonce is added to the third and fourth messages, and the placement of
   the optional Certificate relative to the Signature in the fifth and sixth
   messages is reversed.  Can these two exchanges be merged somehow?

Thanks,

-- Shawn Mamros and Naganand Doraswamy