Cookie Generation Logic

[venkat <venkat@dexceldesigns.com>]

Hi all,

Someone please help me out with the cookie implementation

I create a cookie using the following logic
FAST_HASH(
               IP Source Address,
               IP Destination Address,
               Source Port,
               Destination Port,
               My Local Secret
          );

I thought my implementation was good enough for a cookie until someone
told me, to look into the FreeSWAN's Pluto Code which says

if ( it is a initiator cookie )
	get_64_random_bits();
if ( it is a responder cookie )
	FASH_HASH( ip_addr, local_secret );

I don't get it, why is the initiator cookie only 64 random bits and
responder cookie the actual 64 bit logic. To my understanding, initiator
cookie is created by the initiator and the responder cookie by
responder. What is the responder cookie creation doing at the initiator
end and vice-versa.

Thanks in Advance
- Venkat



--------------------------------------------------------------
Dexcel Electronics Designs (P) Ltd., Bangalore, India