Re: having and eating cake? agressive mode with identity hiding

[Radia Perlman - Boston Center for Networking <Radia.Perlman@sun.com>]

Re: Sheila Frankel's pointing out the loss of ability to negotiate the D-H 
group.

Is it that important to negotiate it rather than having Alice choose?
If so, how many groups might Alice be willing to propose? If it's
only a handful, then it wouldn't be tragic in the rare case where her choice
was unacceptable to Bob for Bob to reply with "unacceptable D-H choice"
and Alice to cycle through her choices. Or have Bob reply with his list of
acceptable choices.

Radia



	From: Sheila Frankel <sheila.frankel@nist.gov>

	
	There is one problem that arises from adopting aggressive mode as the 
single IKE
	variant. Since "g^a mod p" is sent in message 1, we lose the capability 
to
	negotiate the Diffie-Hellman group.
	
	Sheila Frankel
	NIST

---

Follow-Ups:

• Re: having and eating cake? agressive mode with identity hiding
• From: Michael Thomas <mat@cisco.com>
• Re: having and eating cake? agressive mode with identity hiding
• From: Dan Harkins <dharkins@lounge.org>

---

• Prev by Date: RE: Simplifying IKE
• Next by Date: RE: Simplifying IKE
• Prev by thread: Re: having and eating cake? agressive mode with identity hiding
• Next by thread: Re: having and eating cake? agressive mode with identity hiding
• Index(es):
  • Main
  • Thread