SEC does not " increases costs equally for both attackers and defenders." An 
increase of time T for the defender correspond to an increase of time T*2^59 
for the attacker.

-----Original Message-----
From: Jari Arkko [mailto:[email protected]] 
Sent: Thursday, March 21, 2013 1:19 PM
To: Christian Huitema; Hosnieh Rafiee
Cc: Santosh Chokhani; [email protected]; [email protected]; Ray Hunter
Subject: Re: [saag] security consideration of CGA and SSAS - Ii-D action : 
draft-rafiee-6man-ssas

Is there a conclusion of this thread? My read of it is that no amount of 
tweaking how you calculate the IID help the fact that in 59/62 bits you have a 
limited space to search. The Sec scheme does help, but increases costs equally 
for both attackers and defenders. 

FWIW, I'm struggling to understand the draft. But I couldn't make it to the 
meeting.

Jari

--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to