[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Photuris questions



The error message I'd like to recommend is for the case where one side says
to the other "I really wanted you to establish an ESP SA for sending
stuff to me; you chose not to, I'm displeased."

If both AH and ESP are indicated by one SPI, then how are the keys for
the two modes assigned?  Are there two separate keys?

If the number of bits required for supporting all the underlying algorithms
exceeds the number that Photuris can safely deliver, is there an error
message to that effect?  If all the algorithms must have independent keys,
this situation can occur under realistic scenarios.


References: