[tcpm] draft-weis-tcp-auth-auto-ks-00

Greetings,

The TCP Extended Authentication draft (draft-bonica-tcp-auth-04.txt) 
describes key lists, where keys are manually added to the key lists. 
There are operational and security advantages for TCP endpoints 
automatically deriving TCP Extended Authentication session keys. The 
following draft proposes a light-weight mechanism for automatically 
deriving these keys.

http://www.ietf.org/internet-drafts/draft-weis-tcp-auth-auto-ks-00.txt

The abstract in the I-D says:

    This memo describes an automated key selection extension for the TCP
    [RFC0793] authentication option [I-D.bonica-tcp-auth].  This key
    selection extension allows two TCP endpoints to authenticate TCP
    segments using a Message Authentication Code (MAC) key chosen
    dynamically by an endpoint, rather than using a pre-configured MAC
    key.

Comments are appreciated.

Thanks,
Brian
-- 
Brian Weis
Advanced Security Development, Security Technology Group, Cisco Systems
Telephone: +1 408 526 4796
Email: bew@cisco.com

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www1.ietf.org/mailman/listinfo/tcpm