The following errata report has been submitted for RFC9370,
"Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2)"

--------------------------------------
You may review the report below and at:
https://errata.rfc-editor.org/eid9022/

--------------------------------------
Type: Technical
Reported by: Thom Wiggers <[email protected]>

Section A.1 says:

Original Text
-------------
The updated SKEYSEED value is then used to derive the following
keying materials.

   {SK_d(1) | SK_ai(1) | SK_ar(1) | SK_ei(1) | SK_er(1) | SK_pi(1) |
    SK_pr(1)} = prf+ (SKEYSEED(1), Ni | Nr | SPIi | SPIr)

As per [RFC9242], both peers compute IntAuth_i1 and IntAuth_r1 using
the SK_pi(1) and SK_pr(1) keys, respectively.  These values are
required in the IKE_AUTH phase of the exchange.

Corrected Text
--------------
The updated SKEYSEED value is then used to derive the following
keying materials.

   {SK_d(1) | SK_ai(1) | SK_ar(1) | SK_ei(1) | SK_er(1) | SK_pi(1) |
    SK_pr(1)} = prf+ (SKEYSEED(1), Ni | Nr | SPIi | SPIr)

As per [RFC9242], both peers compute IntAuth_i1 and IntAuth_r1 using
the SK_pi and SK_pr keys from IKE_SA_INIT (i.e., the value preceding the 
exchange),
respectively.  These values are required in the IKE_AUTH phase of the exchange.

Notes
-----
RFC 9242 states that the keys used during epoch i are the keys from epoch 
(i-1). From RFC 9242, section 3.3.2: 

Each calculation of IntAuth_[i/r]* uses its own keys SK_p[i/r]*,
which are the most recently updated SK_p[i/r] keys available before
the corresponded IKE_INTERMEDIATE exchange is started.

Instructions:
-------------
This erratum is currently posted as "Reported". Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9370 (draft-ietf-ipsecme-ikev2-multiple-ke)
--------------------------------------
Title               : Multiple Key Exchanges in the Internet Key Exchange 
Protocol Version 2 (IKEv2)
Publication Date    : May 2023
Author(s)           : CJ. Tjhai, M. Tomlinson, G. Bartlett, S. Fluhrer, D. Van 
Geest, O. Garcia-Morchon, V. Smyslov
Category            : Proposed Standard
Source              : ipsecme (sec)
Stream              : IETF
Verifying Party     : IESG

_______________________________________________
IPsec mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to