Re: SOI QUESTIONS: 2.4 Number of crypto operations

[Tylor Allison <allison@securecomputing.com>]

On Thu, 20 Jun 2002, Theodore Ts'o wrote:

> Please discuss and answer this question.....
>
> 2.4 Number of crypto operations
>
> 2.4.A) JFK requires substantially more cryptographic operations for
> rekeying (two more signatures, two more signature validations, and
> three more hashes).  Is this a problem?  More generally, does SOI need
> to be able to support "fast" rekeying?

Yes, SOI should support fast rekeying.  Others have mentioned the need for
a secure management channel.  I agree with this.  I also feel that SOI will
scale better if we provide fast rekeying.  Awefully expensive if you have
hundreds or thousands of clients all rekeying and performing the full
crypto exponentiation for each rekey.

=====================================================================
= Tylor Allison         Secure Computing Corporation        =========
=====================================================================