[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IVs, summary of discussion
Ran Atkinson says:
> Last Monday I gave an MBONE talk on the IPv6 security stuff as part
> of the open IPv6 Design Review. During that talk, Jeff Schiller
> suggested that DES OFB mode might be preferable since IP can both lose
> and re-order packets. I'm wondering what folks on this list think of
> that idea instead of DES CBC mode.
The problem is that if you use OFB you are practically obligated to
use an authenticator because the ability to twiddle known bits in the
packet becomes just too much of a risk, or at least so it would seem
to me. Comments?
Perry
Follow-Ups:
References: