Re: SOI QUESTION: 5.1.2 Agreement of IPsec SA cryptographic algorithms

[Jan Vilhuber <vilhuber@cisco.com>]

On Wed, 10 Jul 2002, Theodore Ts'o wrote:

>
> Please discuss and answer this question:
>
> 5.1.2 Agreement of IPsec SA cryptographic algorithms
>
> JFK's SA negotiation uses pre-defined suites, and Bob presents a single
> suite to Alice. In IKEv2 SA negotiation allows the two parties to agree on
> the most preferred parameters, the same as it does for key negotiation.
>
> 5.1.2.A) Is it important to allow negotiation of the SA algorithms?
>

Yes.

jan


> Implications from the scenarios:
>
> [none]
>

 --
Jan Vilhuber                                            vilhuber@cisco.com
Cisco Systems, San Jose                                     (408) 527-0847

http://www.eff.org/cafe