Text suggestion on computing keymat for rekey

"jpickering@creeksidenet.com" <jpickering@creeksidenet.com> Tue, 25 March 2003 20:08 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA29601 for <ipsec-archive@lists.ietf.org>; Tue, 25 Mar 2003 15:08:50 -0500 (EST)
Received: by lists.tislabs.com (8.9.1/8.9.1) id NAA11014 Tue, 25 Mar 2003 13:14:35 -0500 (EST)
Message-ID: <3E809ECF.7070902@creeksidenet.com>
Date: Tue, 25 Mar 2003 13:24:15 -0500
From: "jpickering@creeksidenet.com" <jpickering@creeksidenet.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; m18) Gecko/20001108 Netscape6/6.0
X-Accept-Language: en
MIME-Version: 1.0
To: ipsec@lists.tislabs.com
Subject: Text suggestion on computing keymat for rekey
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk
Content-Transfer-Encoding: 7bit


To compute keymat for any SA, both sides need to agree on which side is 
initiator.
While this is obvious for new SAs, the text is unclear about rekeys,  eg 
if  the original
responder is the initiator of a rekey, which end is considered initiator 
of the of the
new SA for puposes of computing keymat? After some SF hallway 
discussions, the
general impression I got was that there is some value to keeping the 
original initiator
as initiator of the rekeyed SA, (ie for management purposes this 
approach doesnt allow
a rekey to hide which end was original initiator). As such, I propose 
adding the
following text to the end of section 2.8:

"For purposes of computing keying material for the rekeyed SA, the 
original initiator
of the SA is to be considered initiator of the rekeyed SA."

Jeff