RE: draft-ietf-ipsec-ciph-aes-ctr-00.txt

["Housley, Russ" <rhousley@rsasecurity.com>]

David:

> > It is my understanding that RFC 2401bis is being made more flexible in this
> > area.  Are you suggesting that the AES-CTR document should reference RFC
> > 2401bis instead of RFC 2401?
>
>Well, we don't want to add a normative dependency that might delay counter
>mode from progressing to RFC!  Do you really think that it is necessary to
>reference the ID rather than the RFC in order to avoid manual key use with
>counter mode?  If that's the case, we should perhaps change the text in the
>counter mode draft.  It might be acceptable to say that "AES-CTR MUST NOT be
>used with manual keying, except for the purposes of testing", or something
>along that line.

Since RFC 2401 is an informative reference (not a normative reference), I 
do not think we need to delay for the update.

Russ