RE: Crypto algorithms for IKEv2

[Van Aken Dirk <Dirk.VanAken@thomson.net>]

RE: Crypto algorithms for IKEv2

Hi Paul,

Looking at section 2.1 of your draft RFC or section = 3.3 of the IKE draft, I guess it is now possible to configure IKE with = the NULL encryption algorithm isn't it ?

I like this capability because I have now a simple = means to perform low level troubleshooting with tools such as = Ethereal.

Wouldn't it be interesting to have a MUST implement = or SHOULD implement statement for IKE - NULL encryption ?
As such I can rely on this capability as different = vendors will implement it and will shorten troubleshooting = interoperability issues.

Best regards - Dirk

2.1 Transform type 1: encryption algorithms

Name          = ;       Number     = Defined in
RESERVED              0
ENCR_DES_IV64         = 1         RFC 1827
ENCR_DES              = 2         RFC 2405
ENCR_3DES         =     3         = RFC 2451
ENCR_RC5              = 4         RFC 2451
ENCR_IDEA         =     5         = RFC 2451
ENCR_CAST         =     6         = RFC 2451
ENCR_BLOWFISH         = 7         RFC 2451
ENCR_3IDEA         = ;   8         RFC = 2451
ENCR_DES_IV32         = 9
ENCR_RC4             10
ENCR_NULL         =    11         RFC = 2410
ENCR_AES_128_CBC     12
ENCR_AES_128_CTR     13