[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: compare-jfk-sigma.txt

To: Hugo Krawczyk <hugo@ee.technion.ac.il>
Subject: Re: compare-jfk-sigma.txt
From: Derek Atkins <warlord@mit.edu>
Date: 05 Dec 2001 11:37:48 -0500
Cc: Ran Canetti <canetti@watson.ibm.com>, ipsec@lists.tislabs.com
In-Reply-To: Hugo Krawczyk's message of "Tue, 4 Dec 2001 17:25:49 +0200 (IST)"
References: <Pine.GSO.4.21.0112041628030.9684-100000@ee.technion.ac.il>
Sender: owner-ipsec@lists.tislabs.com

Hugo Krawczyk <hugo@ee.technion.ac.il> writes:

> Note that the poor initiator cannot amortize the costs of this 
> signature verification!

This is actually a feature for DoS protection -- you want the
initiator to do as much if not more work than the responder.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available

Follow-Ups:

Re: compare-jfk-sigma.txt

From: Hugo Krawczyk <hugo@ee.technion.ac.il>

Re: compare-jfk-sigma.txt

From: Eric Rescorla <ekr@rtfm.com>

References:

Re: compare-jfk-sigma.txt

From: Hugo Krawczyk <hugo@ee.technion.ac.il>

Prev by Date: RE: SA look up
Next by Date: Re: Stephane's Comments on IKEv2
Prev by thread: Re: compare-jfk-sigma.txt
Next by thread: Re: compare-jfk-sigma.txt
Index(es):
- Main
- Thread