Re: [IPsec] Cost-efficient quantum-resistant DoS protection

2021-10-28 Thread Scott Fluhrer (sfluhrer)
Sorry if I ask such an obvious question, but would McEliece perform better against packet loss if we introduce a more intelligent ack/retry method? For each, the ack would list which segments of the packet have been received (e.g. bytes 0-3240 and bytes 6780-9800), so that on a retransmit, we o

[IPsec] Comments on draft-pwouters-multi-sa-performance

2021-10-28 Thread Panwei (William)
Hi authors, I’ve read the recent version. This is an interesting solution. I think it should be adopted. Below are some comments. 1. The CPU_QUEUES notification value refers to the number of additional resource-specific Child SAs that may be installed for this particular TSi/TSr combination excl