05 draft status?
Nobuo OKABE <[email protected]> Wed, 17 Sep 2003 15:52:50 +0900 (JST)
| Newsgroups | gmane.ietf.kink |
|---|---|
| Message-ID | <[email protected]> |
I would like to know the status of KINK 05 draft.
Will be the draft revised ?
If so, what part need to be improved?
Is there any issue list (or so on) pointed out by IESG?
Please let me know if any of you have known related pointers.
Here are my comment about 05 draft.
# Sorry for my big delay.
# I suspended my comment because
# I guessed that 06 draft would be issued later.
COMMENT1
about "6.8 KE Payload" or so.
There are two cases to break two-way handshake
for establishing SA.
1) A responder does not choose the first proposal.
2) A initiator sends CREATE with KE payload.
The former case is described in the draft,
but the latter is not.
It seems good for readers to describe the latter case
explicitly in section 6.8 or so.
COMMENT2
about "7.3 CREATE"
Missing KE payload in the REPLY from.
REPLY KINK Header
KINK_AP_REP
[KINK_ENCRYPT]
KINK_ISAKMP
SA Payload[s]
Proposal Payload
Transform Payload
[ Nonce Payload (Nr)]
[KE] <========================== this
[IDci, IDcr]
[Notification Payloads]
COMMENT3
about "8. Key Derivation"
The draft does not define "prf".
In IKE's case, a phase 1 negotiates a hash algorithm
that is used for prf. But KINK does not use IKE phase 1.
I guess that the hash algorithm specified in the Kerberos ticket
is used.
thanks,
----- nobuo