[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: simplifying rekeying [draft-jenkins-ipsec-rekeying-06.txt]
An implementation may be open to a DoS attack if it does not keep
track of the MIDs of Quick Modes in which PFS was used for all active
IKE SAs. This attack is not effective if PFS is not used.
There is no "security hole" associated with small amounts of entropy
nor is there any generic replay attack which can induce an implementation
into processing old IPSec packets.
Dan.
On Mon, 17 Jul 2000 13:34:01 CDT you wrote
> Regardless of how "unique" is interpreted, it does appear that
> an implementation may be open to replay attacks if it does
> not keep track of the MIDs that have been used on a given
> ISKAMP SA.
Follow-Ups:
References: