[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Proposal: user-keys are implementation decision
Uri says:
> Hilarie Orman says:
> > The motivation for per-user keying based on chosen plaintext seems
> > unconvincing to me. The amount of data sent per key can be controlled
> > by the OS, and adjusted to a conservative value based on the algorithm
> > in use. Wouldn't it be cheaper and safer to rekey host-host
> > connections than to negotiate and rekey many user/host keys?
>
> Oh yes! Not only cheaper, but *simpler*! And I think, KISS ideology
> saved more than one life (:-).
Although I see the value of per-user keys, in particular in defeating choosen
plain/ciphertext attacks, I agree with Uri and Hilarie. In fact I think IKMP
and IPSP already include an unstructured SAID mechanism which should allow
implementations which wish to provide seperate keys for each user to do so.
So, why don't we concentrate on designing the protocols, and leave these
issues along, at least for now.
Best, Amir
References: