SEC does not " increases costs equally for both attackers and defenders." An 
increase of time T for the defender correspond to an increase of time T*2^59 
for the attacker.

-----Original Message-----
From: Jari Arkko [mailto:jari.ar...@piuha.net] 
Sent: Thursday, March 21, 2013 1:19 PM
To: Christian Huitema; Hosnieh Rafiee
Cc: Santosh Chokhani; ipv6@ietf.org; s...@ietf.org; Ray Hunter
Subject: Re: [saag] security consideration of CGA and SSAS - Ii-D action : 
draft-rafiee-6man-ssas

Is there a conclusion of this thread? My read of it is that no amount of 
tweaking how you calculate the IID help the fact that in 59/62 bits you have a 
limited space to search. The Sec scheme does help, but increases costs equally 
for both attackers and defenders. 

FWIW, I'm struggling to understand the draft. But I couldn't make it to the 
meeting.

Jari

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to