At 2:23 PM +0300 9/17/09, Tero Kivinen wrote: >When reading the roadmap I noticed that camellia-ctr is also not >defined for IKEv2 SAs, so I was wondering if the text in this document >could be made generic enough so any counter mode cipher could be used.
It is not clear to me that future counter modes will fit today's generic definition. I don't think it is bad to require a specific definition for each application of counter mode. >Other option is of course to include text to ikev2bis which specifies >how to use counter mode ciphers when protecting IKEv2 SAs. This seems like overkill and possibly limiting to future applications of counter mode. --Paul Hoffman, Director --VPN Consortium _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
