Re: Secure legacy authentication for IKEv2

[David Jablon <dpj@theworld.com>]

At 12:12 PM 12/23/02 -0500, Stephen Kent wrote:
>We need to be able to make statement about the security of the key material used for packet confidentiality and packet integrity irrespective of the peer authentication mechanism chosen. To do otherwise would unduly complicate the overall system. That's why the current separation is desirable.

That part of your reply seems reasonable.

I'll attempt to describe a simple change that cannot possibly degrade any
security analysis of the existing system, that can be used to provide
an added layer of security when using legacy credentials,
and that maintains the necessary cryptographic isolation.

-- David