[IPsec] Re: Comments on draft-pwouters-ipsecme-delete-info

2024-08-01 Thread Valery Smyslov
Hi Paul, now I will use this color for my remarks. By the way, I think that it would be more helpful to the user if you include “Related SPI” field in your notify – the SPI of the SA that caused the deletion of this SA. In case of INITIAL_CONTACT this might he

[IPsec] Comments on draft-pwouters-ipsecme-child-pfs-info

2024-08-01 Thread Valery Smyslov
Hi, I also have some comments on draft-pwouters-ipsecme-child-pfs-info. >From the Introduction I learned that the problem this draft is trying to address is the lack of knowledge at the time the initial Child SA is being created in IKE_AUTH of what KE methods are configured for subsequent reke

[IPsec] Re: Comments on draft-pwouters-ipsecme-child-pfs-info

2024-08-01 Thread Paul Wouters
On Thu, Aug 1, 2024 at 4:21 AM Valery Smyslov wrote: > Hi, > > I also have some comments on draft-pwouters-ipsecme-child-pfs-info. > > >From the Introduction I learned that the problem this draft is trying to > address is the > lack of knowledge at the time the initial Child SA is being created i

[IPsec] Re: Comments on draft-pwouters-ipsecme-child-pfs-info

2024-08-01 Thread Valery Smyslov
Hi Paul, On Thu, Aug 1, 2024 at 4:21 AM Valery Smyslov < smyslov.i...@gmail.com> wrote: Hi, I also have some comments on draft-pwouters-ipsecme-child-pfs-info. >From the Introduction I learned that the problem this draft is trying to address is the lack of

[IPsec] Comments on draft-kampanakis-ml-kem-ikev2-03

2024-08-01 Thread Rebecca Guthrie
Hi all, I reviewed draft-kampanakis-ml-kem-ikev2-03 and have provided some comments and suggestions below: "A Cryptanalytically-relevant Quantum Computer (CRQC), if it became a reality, could threaten public key encryption algorithms used today for key exchange." public key encryption algorit