RE: Last ditch proposal for crypto suites

[Scott Fluhrer <sfluhrer@cisco.com>]

At 06:45 AM 8/30/02 , Hallam-Baker, Phillip wrote:
>Actually following on from Radia's point I think we would have three suites:
>
>1: RSA/3DES-CBC/SHA-1 
>2: RSA/AES-CTR-128/SHA-2
>3: RSA/AES-CTR-256/SHA-2

One problem with mandating AES counter mode is that there's been quite a bit
of hardware development that assumed the AES CBC mode draft.  Some of it can
be changed to use counter mode without too much pain and effort, but some of
it can't.  If these are MUST suites, this means that those implementations
cannot do IKEv2 efficiently, not because they cannot do the IKEv2 protocol
itself, but because they cannot do the negotiated IPSec transforms.  I would
suggest that this is not in the IETF's best interest to impose such
limitations.


-- 
scott