Re: [IPsec] Question about AUTH payload

2010-07-02 Thread Joy Latten
On Thu, 2010-07-01 at 14:35 -0400, Dan McDonald wrote: On Thu, Jul 01, 2010 at 01:02:20PM -0500, Joy Latten wrote: SNIP! I am thinking it can be concluded that responder computed MACedIDForR with 1's in the RESERVED field. That seems valid (though clearly the implementation who sends 1s

[IPsec] Question about AUTH payload

2010-07-01 Thread Joy Latten
I have a question about RESERVED field and its influence on AUTH payload. Suppose responder sends and IKE_AUTH message whose IDr payload has 1's in the RESERVED field instead of 0's. (I know rfc says no to this, but this is in regards to an IKEv2 TAHI testcase that tests implementation's

Re: [IPsec] Question about AUTH payload

2010-07-01 Thread Dan McDonald
On Thu, Jul 01, 2010 at 01:02:20PM -0500, Joy Latten wrote: SNIP! I am thinking it can be concluded that responder computed MACedIDForR with 1's in the RESERVED field. That seems valid (though clearly the implementation who sends 1s is violating Postel's Law, but you did say it's a TAHI