[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: How many algorithms per SA/Transform?

To: Dan.McDonald@Eng.sun.com (Dan McDonald)
Subject: Re: How many algorithms per SA/Transform?
From: Derrell Piper <piper@tgv.com>
Date: Tue, 04 Mar 1997 11:00:34 -0800
Cc: ipsec@tis.com
In-reply-to: Your message of "Mon, 03 Mar 1997 14:06:22 PST." <199703032206.OAA29233@kebe.eng.sun.com>
Sender: owner-ipsec@ex.tis.com

Dan,

While there's probably not a strong technical argument for something like
this, it's not forbidden by the architecture.  It would require a base
Transform ID in the IPSEC DOI, some defined set (possibly null) of
associated attributes, and a draft describing the encapsulation format.
(For something this "unique", I'd strongly recommend a self-describing
Transform ID and a null attribute set.)

FWIW, I really don't expect anyone to propose anything like this...

Derrell

References:

How many algorithms per SA/Transform?

From: Dan.McDonald@Eng.sun.com (Dan McDonald)

Prev by Date: RE: How many algorithms per SA/Transform?
Next by Date: Re: How many algorithms per SA/Transform?
Next by thread: Re: TO COMPRESS OR NOT TO CMPRS (please reply)
Index(es):
- Main
- Thread