[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Inconsistencies between values and field size




I don't know if has been pointed out yet, please ignore if it has...

ISAKMP Draft 6
Proposal Payloads
Protocol ID - 1 octet

DOI Draft 2 (Dec 9)
The following table lists the values for the Security Protocol
   Identifiers referenced in an ISAKMP Proposal Payload for the IPSEC
   DOI.
...

   The values 4-15360 are reserved to IANA.  Values 15361-16384 are
   reserved for private use.

The size of the field in the ISAKMP draft the DOI values don't match up.

Easy to fix

Proposal Payload
# of transforms - 2 octets

but look at Transform Payload

# Transforms - 1 octet

So the max you can send in a proposal is 1 octet worth, therefore change
the Protocol ID field to 2 octets and # of Transforms to 1 octet in the
Proposal Payload.
Bye.
----
Greg Carter
Entrust Technologies
carterg@entrust.com
>