A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the IP Security Maintenance and Extensions Working
Group of the IETF.
Title : Using Advanced Encryption Standard (AES) Counter Mode
with IKEv2
Author(s) :
Hi,
We have published a new version of the IKEv2 Redirect and Authentication
Offload draft (draft-padmakumar-ikev2-redirect-and-auth-offload-01).
The draft may be accessed at:
http://www.ietf.org/internet-drafts/draft-padmakumar-ikev2-redirect-and-auth-offload-01.txt
Abstract:
IKEv2 supports mu
At 2:57 PM +1000 7/27/09, Greg Daley wrote:
...
Your reference to 4301 regarding the use of multiple parallel SAs solving
the example is helpful. I will remove the example for clarity.
As Tero noted, RFC 4301 provides a discussion of how an
implementation can, on a local basis, deal with map
Thanks for getting this draft out. Here's a few comments, in general I would
like to copy RFC 3686 as much as possible. Specifically, more of Sec. 2.1 of
that RFC needs to appear here.
2.1: All IKEv2 implementations *that implement AES-CTR* MUST support...
(after all, this is a SHOULD algorithm).
Hi, Yaron,
Thanks for the detailed comments. We will address these following issues soon
in the next version.
Sean
> Thanks for getting this draft out. Here's a few comments, in
> general I would
> like to copy RFC 3686 as much as possible. Specifically, more of
> Sec. 2.1 of
> that RFC needs
Hi Steve,
Thanks for your feedback.
We will add focus on the ability to provide expression of ranges, and hold off
on any DSCP related issues until there is a solid use case.
Greg
> Date: Mon, 27 Jul 2009 11:20:09 -0400
> To: hosk...@hotmail.com
> From
