Re: [IPsec] rfc 8750 question

2022-05-10 Thread Robert Moskowitz
On 5/10/22 08:25, Paul Wouters wrote: On May 10, 2022, at 07:59, Robert Moskowitz wrote:  20    ENCR_AES_GCM_16 and what RFC 8750 defined: 30    ENCR_AES_GCM_16_IIV The only difference is a suffix "_IIV". Actually, I thought that was the implicit IV size.  And thus this was some kin

Re: [IPsec] rfc 8750 question

2022-05-10 Thread Robert Moskowitz
On 5/10/22 08:25, Paul Wouters wrote: On May 10, 2022, at 07:59, Robert Moskowitz wrote:  20    ENCR_AES_GCM_16 and what RFC 8750 defined: 30    ENCR_AES_GCM_16_IIV The only difference is a suffix "_IIV". Actually, I thought that was the implicit IV size.  And thus this was some kin

Re: [IPsec] rfc 8750 question

2022-05-10 Thread Paul Wouters
On May 10, 2022, at 07:59, Robert Moskowitz wrote: > >  > >> 20ENCR_AES_GCM_16 >> >> and what RFC 8750 defined: >> >> 30ENCR_AES_GCM_16_IIV >> >> The only difference is a suffix "_IIV". > > Actually, I thought that was the implicit IV size. And thus this was some > kind of AND con

Re: [IPsec] rfc 8750 question

2022-05-10 Thread Robert Moskowitz
On 5/10/22 01:37, Valery Smyslov wrote: Hi Bob, I just noticed that 8750 defines one algorithm number for aes-gcm: 30 | ENCR_AES_GCM_16_IIV| RFC 8750 But rfc 4106 defined 3: 18 for AES-GCM with an 8 octet ICV; 19 for AES-GCM with a 12 octet ICV; and 2

Re: [IPsec] rfc 8750 question

2022-05-09 Thread Valery Smyslov
Hi Bob, > I just noticed that 8750 defines one algorithm number for aes-gcm: > > 30 | ENCR_AES_GCM_16_IIV| RFC 8750 > > But rfc 4106 defined 3: > >18 for AES-GCM with an 8 octet ICV; >19 for AES-GCM with a 12 octet ICV; and >20 for AES-GCM with a 16 octet I