[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: question on SPI

To: Pars MUTAF <pars.mutaf@inrialpes.fr>
Subject: Re: question on SPI
From: Henry Spencer <henry@spsystems.net>
Date: Thu, 23 Aug 2001 11:04:29 -0400 (EDT)
cc: IP Security List <ipsec@lists.tislabs.com>
In-Reply-To: <3B8547DB.AB6D0FC1@inrialpes.fr>
Sender: owner-ipsec@lists.tislabs.com

On Thu, 23 Aug 2001, Pars MUTAF wrote:
> How a host picks the SPIs when establishing SAs?
> (i.e., randomly? consecutively?)

However the (receiving) host wishes.  Many implementations pick them
randomly, which has minor advantages in making it harder to mount a
denial-of-service attack.  But they could be sequential, or they could be
indices into a table internal to the receiving host. 

                                                          Henry Spencer
                                                       henry@spsystems.net

References:

question on SPI

From: Pars MUTAF <pars.mutaf@inrialpes.fr>

Prev by Date: Re: draft-ietf-ipsec-udp-encaps-00: non-500 ESP encap, 32bits of , i-cookie
Next by Date: question on SPI
Prev by thread: question on SPI
Next by thread: RE: question on SPI
Index(es):
- Main
- Thread