Re: [MEXT] Review of draft draft-patil-mext-mip6issueswithipsec-01

[jouni korhonen <[e-mail]>]

Hi Arnaud,

On Jul 27, 2009, at 11:33 PM, Arnaud Ebalard wrote:

> Hi,
>
> jouni korhonen <[e-mail]> writes:
>
>> Hi Arnaud,
>>
>> Commenting one point here at this time.
>>
>> On Jul 27, 2009, at 10:29 PM, Arnaud Ebalard wrote:
>>
>> [snip]
>>
>>>
>>> o You use the IPsec stack to protect traffic using ESP. You use SA  
>>> for
>>>  that purpose. There is nothing in the document about associated
>>>  Security Policies (SP). Are the ones defined in 3776 reused?
>>>  Can you clarify that point?
>>
>> This is a common misunderstanding due to using term 'ESP' in the
>> I-D. There is no reference nor intent to use IPsec as per RFC4301.  
>> The
>> I-D  only *reuses* the ESP format for encapsulation as what we came  
>> up
>> ourselves looked more or less ESP format. We will (most probably)
>> remove all references to 'ESP' in the future to avoid this mixup.
>
> Just to be sure: you mean you will not use the algorithms  
> implemented in
> the IPsec kernel stack but reimplement everything in userland?

No IPsec kernel stack involved. I am not sure what algorithms you are  
referring here.

Cheers,
	Jouni


>
> Cheers,
>
> a+