[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Some questions

To: Daniel Harkins <dharkins@cisco.com>
Subject: Re: Some questions
From: Lewis McCarthy <lmccarth@cs.umass.edu>
Date: Tue, 12 May 1998 14:51:39 -0400
CC: IP Security List <ipsec@tis.com>
Organization: UMass-Amherst Theoretical Computer Science Group, <http://www.cs.umass.edu/~thtml/>
References: <199805121551.IAA11145@greatdane.cisco.com>
Sender: owner-ipsec@ex.tis.com

Daniel Harkins writes:
>>> this reading correct? If so, one cannot create asymmetrical SA with
>>> ISAKMP, for example, using DES in one direction and IDEA in the
>>> other, that might be useful under some circumstances.
> 
> Yes, that's right, they must use the same transform. Under what situations
> would you want to have asymmetrical SAs?

I suppose you might be sending relatively uninteresting requests in one
direction (i.e., "Tell me everything you know about the nuclear weapons
capability of Elbonia."), and fascinating replies in the other direction
("There's an advanced testing facility for high-yield nuclear devices 
hidden under the swamp 82 miles NE of the Elbonian capital.")

-Lewis

References:

Re: Some questions

From: Daniel Harkins <dharkins@cisco.com>

Prev by Date: Fwd: Re: 40bit DES?
Next by Date: Re: 40bit DES?
Next by thread: RE: [Karen Seo: Thomas Narten -- clarification, etc.]
Index(es):
- Main
- Thread