Re: [IPsec] Early Allocation Request for IPTFS_PROTOCOL IP protocol number.

2020-06-07 Thread Steffen Klassert
On Tue, Jun 02, 2020 at 11:56:48AM -0400, Christian Hopps wrote: > > On Jun 2, 2020, at 10:21 AM, Tero Kivinen wrote: > > Christian Hopps writes: > > > I would assume those questions are going to be asked from chairs or > > area directors during the process anyways, so we need to have good > > an

Re: [IPsec] Last minute change to draft-ietf-ipsecme-qr-ikev2

2020-06-07 Thread Valery Smyslov
Hi Paul, > On Fri, 5 Jun 2020, Scott Fluhrer (sfluhrer) wrote: > > > The draft “Mixing Preshared Keys in IKEv2 for Post-quantum Security” was > winding through the AUTH48 process, when at the last > > minute, I received an email from a researcher who thought they found a > problem with low entrop

Re: [IPsec] Last minute change to draft-ietf-ipsecme-qr-ikev2

2020-06-07 Thread Paul Wouters
> On Jun 7, 2020, at 06:24, Valery Smyslov wrote: > > Hi Paul, > > I read this text as a caveat for implementers to not use > keys which cannot provide enough entropy in any case (e.g. passwords). > With this reading it's a text for implementers, not for users. If you read it that way, then

Re: [IPsec] Early Allocation Request for IPTFS_PROTOCOL IP protocol number.

2020-06-07 Thread Michael Richardson
Steffen Klassert wrote: > This alterative usecase tries to solve the 'small packet' tunneling > problem. Sending small packets over a tunnel usually creates quite a > lot of overhead, as each packet needs to get it's own tunnel header > etc. For IPsec, the situation is even wors