Question with Using AES CCM Mode With IPsec ESP

Jimmy Hsieh (謝侑村) <Jimmy.Hsieh@rdc.com.tw> Mon, 08 March 2004 07:52 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA14625 for <ipsec-archive@lists.ietf.org>; Mon, 8 Mar 2004 02:52:14 -0500 (EST)
Received: by lists.tislabs.com (8.9.1/8.9.1) id AAA20355 Mon, 8 Mar 2004 00:48:17 -0500 (EST)
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Content-Class: urn:content-classes:message
Subject: Question with Using AES CCM Mode With IPsec ESP
MIME-Version: 1.0
Content-Type: text/plain; charset="big5"
Date: Mon, 08 Mar 2004 14:02:53 +0800
Message-ID: <FD9E7CA62511214EBE6EB498E590A5CA65E2B9@rdc1.rdc>
Thread-Topic: Question with Using AES CCM Mode With IPsec ESP
thread-index: AcP/z4F6YHSo5HHgRzq/AJMeeziUugAjUXgg
From: "Jimmy Hsieh (謝侑村)" <Jimmy.Hsieh@rdc.com.tw>
To: housley@vigilsec.com
Cc: ipsec@lists.tislabs.com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id AAA20347
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk
Content-Transfer-Encoding: 8bit

Hi Mr. Housley:
	After reading "Using AES CCM Mode With IPsec ESP
<draft-ietf-ipsec-ciph-aes-ccm-05.txt>," I have two questions about constructing AAD.
	1.	Is the "64-bit Extended Sequence Number" transmitted? Or only "Low
		32-bit of Extended Sequence Number" is transmitted.
	2.	In "IP Encapsulating Security Payload (ESP)
		<draft-ietf-ipsec-esp-v3-08.txt>," it is mentioned that the high 32-bit of
		Extended Sequence Number is placed after the "Next Header" field. The
		Location for high 32-bit of Extended Sequence Number is differently
		defined in <draft-ietf-ipsec-esp-v3-08.txt> and
		<draft-ietf-ipsec-ciph-aes-ccm-05.txt>. Could you comment on this?

Thank you very much.

Jimmy Hsieh