HI Tero,
Hmm... actually we should most like use the same names we use in the IANA registry.
Agree, this would make things more clear.
I think the best is to say that in general with AES encryption (GCM, CBC, CCM etc) we assume the key length is 128-bits. (i.e. the
And don't forget about GMAC.
MUST for AES-CBC is for 128-bit keys, and the SHOULD+ for AES-GCM is also for 128-bit keys with x octect ICV).
I also think this is the best way. I listed the other two just for completeness.
Valery.
_______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec