[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Generating 3DES keys from SKEYID_e
>
> Another alternative would be to use Tiger as the hash. That is a
> SHOULD in RFC 2409 and gives a 192-bit hash.
> http://www.cs.technion.ac.il/~biham/Reports/Tiger/
>
>
That's a good work-around solution for the short term, and requires no
modifications to IKE.
If IKE ever gets rev'ed however, I'd like to see g^xy (or some other large
secret value) be included in the prf feedback mechanism used to expand
SKEYID_e.
Stephane.
References: