[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: suites - phase 1 vs 2

>   I think that we have ESP suites like:
> 
>   1) 3DES/MD5  (i.e. no IPcomp)
>   2) 3DES/SHA1
>   3) 3DES/MD5/LZS
>   4) AES/SHA1/LZS
>   ...
> 
>   that is, I'm pretty sure that we want the IPcomp choice (or not) to be part
> of the ESP suite, not a seperate list.

You either need to also include AH (whether it's there or not), OR you need
to treat AH, ESP, and IPcomp as separate protocols.  You can't just include
subsets.  You need to either treat the whole problem, or decompose the
problem completely.

Dan