[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SA identification

To: IP Security List <ipsec@lists.tislabs.com>
Subject: Re: SA identification
From: Henry Spencer <henry@spsystems.net>
Date: Thu, 22 Mar 2001 09:36:52 -0500 (EST)
In-Reply-To: <p05010401b6dfaec6aa35@[128.33.238.44]>
Sender: owner-ipsec@lists.tislabs.com

On Thu, 22 Mar 2001, Stephen Kent wrote:
> really whether anyone manages SPIs in a fashion that relies on using 
> the other two values for differentiation.

Linux FreeS/WAN currently makes minor use of the ability to assign the
same SPI to SAs of different protocols, for the case where a single
connection uses multiple protocols (e.g. AH+ESP).  We're not strongly
attached to this, however... especially since we definitely belong to the
"Death to AH!!!" faction. 

                                                          Henry Spencer
                                                       henry@spsystems.net

Follow-Ups:

Death to AH (was Re: SA identification)

From: Ari Huttunen <Ari.Huttunen@F-Secure.com>

References:

SA identification

From: Stephen Kent <kent@bbn.com>

Prev by Date: Re: SA identification
Next by Date: IDS (Crypto-Gram March 2001)
Prev by thread: SA identification
Next by thread: Death to AH (was Re: SA identification)
Index(es):
- Main
- Thread