[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipsec
Subject:    [Ipsec] IKEv1 Security Considerations
From:       Russ Housley <housley () vigilsec ! com>
Date:       2006-03-30 0:35:34
Message-ID: 7.0.0.16.2.20060329193457.02cd98e8 () vigilsec ! com
[Download RAW message or body]

RFC 2409 says:

    Repeated re-keying using Quick Mode can consume the entropy of the
    Diffie-Hellman shared secret. Implementors should take note of this
    fact and set a limit on Quick Mode Exchanges between exponentiations.
    This memo does not prescribe such a limit.

What limit do implementors impose?

Russ


_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec
[prev in list] [next in list] [prev in thread] [next in thread]