Re: [IPsec] Some thoughts regarging draft-hopps-ipsecme-iptfs-01

2019-12-03 Thread Steffen Klassert
On Mon, Dec 02, 2019 at 10:57:59AM -0500, Christian Hopps wrote: > > On Dec 2, 2019, at 9:11 AM, Steffen Klassert > > wrote: > > On Mon, Dec 02, 2019 at 06:22:26AM -0500, Christian Hopps wrote: > >>> On Dec 2, 2019, at 3:01 AM, Steffen Klassert > >>> wrote: > >>> On Thu, Nov 28, 2019 at 04:49:3

Re: [IPsec] Some thoughts regarging draft-hopps-ipsecme-iptfs-01

2019-12-03 Thread Valery Smyslov
> > The receiver can do any number of wrong things with what it sends, but I'd > > normally call those bugs. :) > > Yes, that's true. But if the protocol allows to do things wrong, it is > a bug in the protocol :) > > Maybe you can just make it clear at the sender side by saying something > like

Re: [IPsec] Some thoughts regarging draft-hopps-ipsecme-iptfs-01

2019-12-03 Thread Christian Hopps
> On Dec 3, 2019, at 3:10 AM, Steffen Klassert > wrote: > On Mon, Dec 02, 2019 at 10:57:59AM -0500, Christian Hopps wrote: >> >> Technically though, attaching a packet ID to the fragments to allowing >> sending them in any order saves only a little on code complexity (i.e., not >> using an

Re: [IPsec] Some thoughts regarging draft-hopps-ipsecme-iptfs-01

2019-12-03 Thread Christian Hopps
> On Dec 3, 2019, at 6:02 AM, Valery Smyslov wrote: > >>> Adding a packet ID also means that you can't just chain the inner traffic >>> buffers together to form the IP-TFS >> payload as you must now insert an extra header between each of the inner >> packets, this is going to affect >> perfo

[IPsec] Review of draft-ietf-lwig-minimal-esp-00

2019-12-03 Thread Valery Smyslov
Hi, I reviewed draft-ietf-lwig-minimal-esp-00. In general I think that the document provides useful guidelines on how ESP can be implemented on constrained devices. General comment: the draft uses RFC2119 requirement language in several places, and it is not always clear whether it is just a repe

Re: [IPsec] Review of draft-ietf-lwig-minimal-esp-00

2019-12-03 Thread Daniel Migault
Thank you Valery for the detailed review. That is really much appreciated. We will update the document accordingly by the next few weeks also considering the feed backs from Scott. Yours, Daniel On Tue, Dec 3, 2019 at 8:08 AM Valery Smyslov wrote: > Hi, > > I reviewed draft-ietf-lwig-minimal-es

Re: [IPsec] Alternative Approach for Postquantum Preshared Keys in IKEv2

2019-12-03 Thread Paul Wouters
On Thu, 28 Nov 2019, Valery Smyslov wrote: some time ago I've posted a new draft "An Alternative Approach for Postquantum Preshared Keys in IKEv2". AS you all know we have "Postquantum Preshared Keys for IKEv2" (draft-ietf-ipsecme-qr-ikev2) draft that is already in Publication Requested sta