Re: Proposed changes to ESP (andf a little AH too)

[Robert Moskowitz <rgm3@chrysler.com>]

At 06:23 PM 3/21/97 -0500, Stephen Kent wrote:
>
>	Even for transport mode ESP, the proposed swap of fields only
>exposes the packet counters, nothing else that was not expose before.  The
>SPIs are equally visible in both cases, as are the soure and destination
>addresses and the IP packet IDs. Together, these pieces of data provide me
>with enough info to do a good job of TA, exclusive of the counter info.
>So, I'm not sure that I understand why you feel that the exposure of the
>packet counters represents much of an aid to traffic analysis.

Silly rabbit, when you are behind on mail, good thing to read through whole
thread before interjecting :)

This answers my question Steve....


Robert Moskowitz
Chrysler Corporation
(810) 758-8212

---

References:

• Re: Proposed changes to ESP (andf a little AH too)
• From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
• Proposed changes to ESP (andf a little AH too)
• From: Stephen Kent <kent@bbn.com>
• Re: Proposed changes to ESP (andf a little AH too)
• From: Stephen Kent <kent@bbn.com>

---

• Prev by Date: Re: Proposed changes to ESP (andf a little AH too)
• Next by Date: replay mandatory?
• Prev by thread: Re: Proposed changes to ESP (andf a little AH too)
• Next by thread: Re: Proposed changes to ESP (andf a little AH too)
• Index(es):
  • Main
  • Thread