Tero Kivinen writes: > I would like to add one more there, i.e., ESN sent as 64-bit sequence > number (i.e. transmitting full ESN value in packet) in such way that you > send lower 32-bits first, and then you add upper 32-bits of the ESN > between SN and payload data, i.e., there would be upper bits of ESN > before first bytes of payload data (IV):
I do favor transmitting the full 64-bit ESN in packet. And I can add this solution in the next version. In fact, this is one candidate solution I considered at the beginning. But I thought modifying the ESP packet format was a very significant change. I was afraid that people would think a new ESP version is required and not accept it by only using this notification. So I was not brave enough to write it in the draft v00. Regards & Thanks! Wei PAN (潘伟) _______________________________________________ IPsec mailing list -- ipsec@ietf.org To unsubscribe send an email to ipsec-le...@ietf.org