> On Jun 6, 2025, at 2:20 PM, Jeffrey Haas <[email protected]> wrote: > >> The NULL authentication mechanism uses the Meticulous Keyed ISAAC for >> generating and inserting a sequence number in the packet. On the wire, the >> sequence number is not meticulous and therefore it is very hard for anybody >> other than the sender and the receiver to guess what that sequence number >> should be on the wire. > > Sorry, that's not the current procedure for the NULL auth type. It's > literally just a sequence number. > > The direction we went is that if you want protection, use the ISAAC mode. > You can get the meticulous sequence numbers from that.
You are right. I was mixing up NULL Auth Type, which allows us to insert a sequence number and ISAAC mode, where you get protection for that sequence number. Mahesh Jethanandani [email protected]
