Re: [Emu] IMSK derivation issue

2012-10-07 Thread Jim Schaad
I have no problems with adding the Policy steps to the processing. From: Hao Zhou (hzhou) [mailto:hz...@cisco.com] Sent: Thursday, October 04, 2012 8:56 PM To: Jim Schaad; emu@ietf.org Subject: Re: [Emu] IMSK derivation issue Jim: Thanks for pointing out this issue. How about the

Re: [Emu] IMSK derivation issue

2012-10-04 Thread Hao Zhou (hzhou)
Jim: Thanks for pointing out this issue. How about the following text with slight modification with policy control from both sides to prevent downgrade attack. Added text in red. 1. The first sender of the Crypto-Binding TLV needs to create it as follows: a) If the EMSK is not available, then i