On Sat, 16 Mar 2002, Dan Harkins wrote: > The specification for allowable range is in section 5 of RFC2409. Wups, like I said, last-minute addition... although Andrew's comment about 40-byte nonces being a stress test suggests that a lot of people haven't taken that 8-256 range very seriously. Henry Spencer henry@spsystems.net