Hi,

I am having some problem understanding how AUTH value is calculated
during IKE_AUTH when a session is resumed using RFC 5723. Is the
AUTH value calculation always going to be AUTH = prf(SK_px, <message octets>) 
regardless of the auth type used? 

For example if the auth method used during login was RSA Digital Signature for 
both client and gateway auth, then on session resumption, should the auth value 
be computed using RSA private key as well or should the AUTH value be 
computed using prf(SK_px, <message octets>)?

Thanks



_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to