RE: Length of pre-shared key

["Andrew Krywaniuk" <andrew.krywaniuk@alcatel.com>]

I don't think there is a specific limit. After all, HMAC tells you how to
stretch the input if it is less that the size of the hash output. But use
your common sense: the shorter the input, the easier it will be for a
cracking program to guess it. Also, it's the entropy in the password, not
the length, that matters.

Andrew
-------------------------------------------
There are no rules, only regulations. Luckily,
history has shown that with time, hard work,
and lots of love, anyone can be a technocrat.



> -----Original Message-----
> From: owner-ipsec@lists.tislabs.com
> [mailto:owner-ipsec@lists.tislabs.com]On Behalf Of
> juha.ollila@nokia.com
> Sent: Monday, February 25, 2002 9:41 AM
> To: ipsec@lists.tislabs.com
> Subject: Length of pre-shared key
>
>
> 	Hello!
>
> Have IPsec and IKE specifications any requirements about the
> pre-shared keys? I didn't find the required length of pre-shared key.
>
> Best Regards,
> Juha Ollila
>