In your letter dated Mon, 17 Oct 2011 10:25:19 -0500 you wrote:
>Appreciate the quick reply.  Note BrianC already noted that 20 bits will
>not suffice by saying "It puts you into birthday-paradox territory on a
>LAN with a few hundred nodes.".  His email is at the URL below.
>
>http://www.ietf.org/mail-archive/web/ipv6/current/msg14835.html

I'm not sure how you would get a birthday paradox here. Applying the birthday
paradox, you would get that if you have a network with a 1000 nodes, and all
nodes try to configure the exact same IPv6 address at the same time, then
there is a probability of about 0.5 that two nodes will mistakenly assume that
there is a loopback situation and all the others will detect a duplicate
address.

That's not a problem I would worry about.

>We can go for a 62 bits long nonce in the Nonce Option.  Can't pick 64
>because the Nonce Option will then not end in an 8-byte boundary.  See
>the details from RFC 3971 below. 
>
>     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>    |     Type      |    Length     |  Nonce ...                    |
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |
>    |                                                               |
>    .                                                               .
>    .                                                               .
>    |                                                               |
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>
>   Length
>
>      The length of the option (including the Type, Length, and Nonce
>      fields) in units of 8 octets.
>
>   Nonce
>
>      A field containing a random number selected by the sender of the
>      solicitation message.  The length of the random number MUST be at
>      least 6 bytes.  The length of the random number MUST be selected
>      so that the length of the nonce option is a multiple of 8 octets.

So it looks like the shortest nonce is 6 octets or 48 bits and then the next
longer one is 14 octets or 112 bits.

SEND doesn't seem to say anything about the length of the nonce. I guess that
48 bits should be enough to be secure. I think 48 bits is more than enough
for DAD.


--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to