Re: replay field size

[Stephen Kent <[e-mail]>]

Niels,

	It's true that a shorter hash makes it easier to find a collision,
for a given packet, assuming a brute force search.  However, Hugo's
argument suggests that because of the way we are using the hash, truncation
may make it even harder to work backwards to find the key, which poses the
really significant concern in this environment.  I agree with your
observation that spending another 4 bytes is not so bad in the grand scheme
of things, but we have made similar tradeoffs in IPSEC (look at the
shortened IV techniques) before, so we have to decide why to draw the line
here.

Steve