[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Increased sequence number in ESP/AH

To: Andrea Colegrove <acc@columbia.sparta.com>
Subject: Re: Increased sequence number in ESP/AH
From: Stephen Kent <kent@bbn.com>
Date: Tue, 23 Jan 2001 18:42:14 -0500
Cc: "'ipsec@lists.tislabs.com'" <ipsec@lists.tislabs.com>
In-Reply-To: <3A6DF166.60200CD1@columbia.sparta.com>
References: <CB46341FECBDD111832600A0C926615A07823786@hasmsx31.iil.intel.com><v0422080bb692438a43ca@[171.78.30.112]><3A6DF166.60200CD1@columbia.sparta.com>
Sender: owner-ipsec@lists.tislabs.com

At 4:02 PM -0500 1/23/01, Andrea Colegrove wrote:
>Steve,
>     How does this address freshness (anti-replay)?
>
>     Is this intended only as a useful feature for high-speed devices that may
>need additional SA lifetime?
>
>--- Andrea Colegrove

The extended sequence number is made part of the integrity check, 
e.g., by virtually appending it to the payload, so that anti-replay 
is still offered to an SA that makes use of the extended sequence 
numbers.

Steve

References:

Increased sequence number in ESP/AH

From: "Costo, Avi" <avi.costo@intel.com>

Re: Increased sequence number in ESP/AH

From: Stephen Kent <kent@bbn.com>

Re: Increased sequence number in ESP/AH

From: Andrea Colegrove <acc@columbia.sparta.com>

Prev by Date: Re: Increased sequence number in ESP/AH
Next by Date: Re: Increased sequence number in ESP/AH
Prev by thread: Re: Increased sequence number in ESP/AH
Next by thread: Re: Increased sequence number in ESP/AH
Index(es):
- Main
- Thread