Re: [tcpm] TCP-AO: Text for New_Key Process

At Tue, 03 Feb 2009 08:34:53 -0800,
> OK, let's call the place where the connection info is stored the STORE.
>
> Then the steps still become:
> 
> - - get the keyID from the packet
> - - go to the STORE to find out how long the MAC is
> - - pass the keyID and (optionstart + len - maclen)
> 
> Still three steps, vs one:
> 
> - - pass the keyID and (optionstart + 2)
> 
> Note that the second way doesn't need to go to a separate table of
> information to figure out how to finish parsing the packet. Regardless
> of what you call it or where you put it, this takes multiple steps and
> consulting the STORE before you can pass the required information to the
> verification algorithm.

Again, I wouldn't construct the system this way.

Rather, you hang the information required to process each connection
off the connection itself. This is how pretty much every SSL/TLS stack
works.

-Ekr
_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm