[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

hash payload in IKE



Dear those who are familiar with RFC2409 and IKE implementations,

RFC 2409 says

"For authentication with digital signatures, HASH_I and HASH_R
are signed and verified" (in Page 10) and

"the signed data, SIG_I or SIG_R, is the
result of the negotiated digital signature algorithm applied to HASH_I or
HASH_R"
^^^^
(in Page 11).

Does this mean that the hash payloads (HASH_I, HASH_R) are
sent explicitly?
Or they are not transmitted but must be computed by the recipient?

---
K.Matsuura