[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Some comments to draft-ietf-ipsec-ikev2-00.txt

To: ipsec@lists.tislabs.com
Subject: Re: Some comments to draft-ietf-ipsec-ikev2-00.txt
From: daw@mozart.cs.berkeley.edu (David Wagner)
Date: 12 Dec 2001 03:41:52 GMT
Distribution: isaac
Newsgroups: isaac.lists.ipsec
Organization: University of California, Berkeley
References: <Pine.GSO.4.21.0112120038220.28859-100000@ee.technion.ac.il> <000901c182bb$48f7f730$2dc6830c@andrewk3.ca.newbridge.com>
Sender: owner-ipsec@lists.tislabs.com

Andrew Krywaniuk wrote:
>The problem is that no matter how large you make your DH exponent, the
>entropy in your key(s) is limited by the output of your hash.

Why is this a problem?  Are you worried about 2^160 work attacks?

Follow-Ups:

Re: Comments regarding key stretching algorithm

From: "Andrew Krywaniuk" <andrew.krywaniuk@alcatel.com>

References:

RE: Some comments to draft-ietf-ipsec-ikev2-00.txt

From: Hugo Krawczyk <hugo@ee.technion.ac.il>

RE: Some comments to draft-ietf-ipsec-ikev2-00.txt

From: "Andrew Krywaniuk" <andrew.krywaniuk@alcatel.com>

Prev by Date: RE: compare-jfk-sigma.txt
Next by Date: More Son-of-IKE Performance
Prev by thread: RE: Some comments to draft-ietf-ipsec-ikev2-00.txt
Next by thread: Re: Comments regarding key stretching algorithm
Index(es):
- Main
- Thread