[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Please kill preshared key.



On Fri, 7 Dec 2001, david chen wrote:
> What I infered is that
> the pre-shared symmetric key can be used for both authentication and
> encryption without key-exchange (KE) since this key is exchnaged through
> 'out-of-band' secured channel and is *intended* for the two devices only.

Your inference is incorrect.  That is not how today's IPSec PSK works.

                                                          Henry Spencer
                                                       henry@spsystems.net



Follow-Ups: References: