[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Proposed changes to ESP (andf a little AH too)



Hsin,

	Arbitrary size windows are potentially expensive to implement,
though conceptually simple.  We chose 32 (and multiples thereof) for the
ease with which one can implement the window on a 32 bit (or 64 bit)
machine.  This sort of pragmatic recognition of commonly deployed machine
word sizes also shows up in the IPv6 packet alignment requirements, so it
is not out of pace here.  Note that there is no security risk associated
with a larger window size, i.e., in all cases all replays are rejected.
The larger window size just provides a greater tolerance for out-of-order
arrival, which is itsefl a feature of IP.

Steve




References: