[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: isakmp cookies field

To: "'Shoichi Sakane'" <sakane@kame.net>
Subject: RE: isakmp cookies field
From: "Aronson, David" <daronson@cryptek.com>
Date: Mon, 6 Aug 2001 10:34:44 -0400
Cc: "'ipsec@lists.tislabs.com'" <ipsec@lists.tislabs.com>
Sender: owner-ipsec@lists.tislabs.com

 > could anybody tell me what the benefit of the isakmp cookie 
 > field is ?
 > i think the cookie indicates just isakmp spi.  does it have 
 > any function
 > to prevent from dos attack ?

Yes, exactly.  See RFC 2048 (ISAKMP), section 2.5.3 (Anti-Clogging Token
("Cookie") Creation), on pages 20-21.

-- 
Dave Aronson, Sysop of free public Fidonet BBS Air 'n Sun, +1-703-319-0714.
Opinions all MINE, not by Cryptek/NRA/SCA/Mensa/HWG/LPUSA/CAUCE/FedGov/God!
See my web site, at http://listen.to/davearonson (last updated 2001-06-27).
Device-driver proggers: see http://www.cryptek.com and send me your resume!

Follow-Ups:

RE: isakmp cookies field

From: Shoichi Sakane <sakane@kame.net>

Prev by Date: Re: isakmp cookies field
Next by Date: opportunistic encryption deployment problems
Next by thread: I-D ACTION:draft-ietf-ipsec-ike-lifetime-00.txt
Index(es):
- Main
- Thread