SEC does not " increases costs equally for both attackers and defenders." An increase of time T for the defender correspond to an increase of time T*2^59 for the attacker.
-----Original Message----- From: Jari Arkko [mailto:jari.ar...@piuha.net] Sent: Thursday, March 21, 2013 1:19 PM To: Christian Huitema; Hosnieh Rafiee Cc: Santosh Chokhani; ipv6@ietf.org; s...@ietf.org; Ray Hunter Subject: Re: [saag] security consideration of CGA and SSAS - Ii-D action : draft-rafiee-6man-ssas Is there a conclusion of this thread? My read of it is that no amount of tweaking how you calculate the IID help the fact that in 59/62 bits you have a limited space to search. The Sec scheme does help, but increases costs equally for both attackers and defenders. FWIW, I'm struggling to understand the draft. But I couldn't make it to the meeting. Jari -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------