Re: [IPsec] draft-fluhrer-qr-ikev2 AUTH issue

2017-08-23 Thread Valery Smyslov
Hi Panos, > Valery, > It is a good idea. A new optional notification that includes the auth_data as > it would be calculated without the > PPK would work. With that, the corner case of ' PPK_id configured on > initiator but missing on the responder' is > addressed. There is an additional cost

Re: [IPsec] draft-fluhrer-qr-ikev2 AUTH issue

2017-08-23 Thread Paul Wouters
On Wed, 23 Aug 2017, Valery Smyslov wrote: It is a good idea. A new optional notification that includes the auth_data as it would be calculated without the PPK would work. With that, the corner case of ' PPK_id configured on initiator but missing on the responder' is addressed. There is an