Re: [IPsec] I-D Action: draft-ietf-ipsecme-ikev2-multiple-ke-00.txt

Hi,

a new version of the draft has been published.

1. The draft name is changed to reflect its adoption by the WG and to better reflect its current concept
2. The concept is shifted from focusing on PQ hybrid mode only to defining a general way of combining
    several key exchanges (whether being classic or PQ) in IKEv2
3. A new dedicated exchange type (IKE_FOLLOWUP_KE) is defined for performing additional key exchanges 
     following CREATE_CHILD_SA exchange (many folks on the list and off the list asked for this)
4. Extra nonces are excluded from additional key exchanges, a pair of nonces
     exchanged in IKE_SA_INIT (or CREATE_CHILD_SA) is used instead (some people complained
     that extra nonces complicated implementations, and it seems that they are not needed for security)
5. IANA considerations text is fixed
6. Some important clarifications and a lot of minor text improvements

Please, review.

Regards,
Valery (for the authors).

> -----Original Message-----
> From: IPsec [mailto:ipsec-bounces@ietf.org] On Behalf Of internet-drafts@ietf.org
> Sent: Friday, January 10, 2020 2:40 PM
> To: i-d-announce@ietf.org
> Cc: ipsec@ietf.org
> Subject: [IPsec] I-D Action: draft-ietf-ipsecme-ikev2-multiple-ke-00.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the IP Security Maintenance and Extensions WG of the IETF.
> 
>         Title           : Multiple Key Exchanges in IKEv2
>         Authors         : C. Tjhai
>                           M. Tomlinson
>                           G. Bartlett
>                           S. Fluhrer
>                           D. Van Geest
>                           O. Garcia-Morchon
>                           Valery Smyslov
> 	Filename        : draft-ietf-ipsecme-ikev2-multiple-ke-00.txt
> 	Pages           : 23
> 	Date            : 2020-01-08
> 
> Abstract:
>    This document describes how to extend the Internet Key Exchange
>    Protocol Version 2 (IKEv2) to allow multiple key exchanges to take
>    place while computing of a shared secret during a Security
>    Association (SA) setup.  The primary application of this feature in
>    IKEv2 is the ability to perform one or more post-quantum key
>    exchanges in conjunction with the classical (Elliptic Curve) Diffie-
>    Hellman key exchange, so that the resulting shared key is resistant
>    against quantum computer attacks.  Another possible application is
>    the ability to combine several key exchanges in situations when no
>    single key exchange algorithm is trusted by both initiator and
>    responder.
> 
>    This document updates RFC7296 by renaming a tranform type 4 from
>    "Diffie-Hellman Group (D-H)" to "Key Exchange Method (KE)" and
>    renaming a field in the Key Exchange Payload from "Diffie-Hellman
>    Group Num" to "Key Exchange Method".  It also renames an IANA
>    registry for this transform type from "Transform Type 4 - Diffie-
>    Hellman Group Transform IDs" to "Transform Type 4 - Key Exchange
>    Method Transform IDs".  These changes generalize key exchange
>    algorithms that can be used in IKEv2.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-multiple-ke/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-ipsecme-ikev2-multiple-ke-00
> https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-multiple-ke-00
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec