Re: [pcp] Comparison of PCP authentication

[Alper Yegin <[e-mail]>]

Hi Margaret,

> Since this is UDP, there is nothing that inherently binds the PANA authentication to a particular (set of) PCP request(s).  So, we will need to make sure that the information passed in the authentication option is sufficient for the sever to securely determine that the client sending a the PCP request is the same client that initiated the PANA exchange and vice versa, just as we would need to do if PANA and PCP were run on separate ports.  I don't think this will be difficult, we just need to make sure that we achieve it.
> 

That's right.
PANA session will generate a Session-Id, Key-Id, and a PCP key. We should use the two identifiers along with the MIC generated using the PCP key in Authentication Tag Option. That's how PANA session and PCP messages get crypto-bound to each other.


> Do you know what existing PANA implementations will do if the "Reserved" field at the start of the packet is non-zero? 
> 

According to the RFC 5191, receiver MUST ignore the Reserved bits.

Alper