Text suggestion on computing keymat for rekey
"jpickering@creeksidenet.com" <jpickering@creeksidenet.com> Tue, 25 March 2003 20:08 UTC
Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA29601 for <ipsec-archive@lists.ietf.org>; Tue, 25 Mar 2003 15:08:50 -0500 (EST)
Received: by lists.tislabs.com (8.9.1/8.9.1) id NAA11014 Tue, 25 Mar 2003 13:14:35 -0500 (EST)
Message-ID: <3E809ECF.7070902@creeksidenet.com>
Date: Tue, 25 Mar 2003 13:24:15 -0500
From: "jpickering@creeksidenet.com" <jpickering@creeksidenet.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; m18) Gecko/20001108 Netscape6/6.0
X-Accept-Language: en
MIME-Version: 1.0
To: ipsec@lists.tislabs.com
Subject: Text suggestion on computing keymat for rekey
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk
Content-Transfer-Encoding: 7bit
To compute keymat for any SA, both sides need to agree on which side is initiator. While this is obvious for new SAs, the text is unclear about rekeys, eg if the original responder is the initiator of a rekey, which end is considered initiator of the of the new SA for puposes of computing keymat? After some SF hallway discussions, the general impression I got was that there is some value to keeping the original initiator as initiator of the rekeyed SA, (ie for management purposes this approach doesnt allow a rekey to hide which end was original initiator). As such, I propose adding the following text to the end of section 2.8: "For purposes of computing keying material for the rekeyed SA, the original initiator of the SA is to be considered initiator of the rekeyed SA." Jeff
- Text suggestion on computing keymat for rekey jpickering@creeksidenet.com
- Re: Text suggestion on computing keymat for rekey Bill Sommerfeld
- Re: Text suggestion on computing keymat for rekey Michael Richardson