[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Granularity of authentication in swIPe
Steve Kent says:
> You're right, if you want to require that the crypto interface
> parse the IPSP header, then IPSP treat the use of a sequence number as
> IV uniformly. Your view is that the associated modulariy doesn't seem
> to be worhtwhile; my view is that the proposed space-saving hack
> doesn't seem to be worth violating modularity.
Just a note: the decent TCP/IP implementations I know of seem to
routinely violate modularity for performance.
Perry
Follow-Ups:
References: