Re: SOI QUESTIONS: 2.4 Number of crypto operations

[Lakshminath Dondeti <ldondeti@nortelnetworks.com>]

Theodore Ts'o wrote:

> Please discuss and answer this question.....
> 
> 2.4 Number of crypto operations
> 
> 2.4.A) JFK requires substantially more cryptographic operations for
> rekeying (two more signatures, two more signature validations, and
> three more hashes).  Is this a problem?  More generally, does SOI need
> to be able to support "fast" rekeying?
> 


Fast rekeying *is* important in SOI.  More specifically, a secure SA 
management channel can be used for sending Informational, Delete or 
error messages.  It is more efficient and scales better (e.g. in the VPN 
and remote access scenarios).

cheers,
Lakshminath


>