[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: correction on SPIs

To: rja@cisco.com
Subject: Re: correction on SPIs
From: Phil Karn <karn@qualcomm.com>
Date: Mon, 18 Dec 1995 22:56:21 -0800 (PST)
Cc: ipsec@ans.net
In-Reply-To: <199512131632.AA03477@interlock.ans.net> (message from Ran Atkinson on Wed, 13 Dec 1995 08:32:47 -0800)

>The NRL software does indeed have separate number spaces for SPIs and so
>an AH session and an ESP session to the same destination with the same
>SPI value will indeed be different Security Associations in the Key
>Engine.  

My code has a single SPI database but each entry provides for separate
AH and ESP transforms, which is the important part. In effect there are
two separate databases merged into one.

I don't care about the details of an implementation; as long as it can
handle ESP and AH independently that's good enough by me.

Phil

References:

correction on SPIs

From: Ran Atkinson <rja@cisco.com>

Prev by Date: Re: SPIs, etc.
Next by Date: Re: ICMP Security Failures
Prev by thread: Re: correction on SPIs
Next by thread: Re: correction on SPIs
Index(es):
- Main
- Thread