Re: Any other security other than IPSec?

On 8/2/2003 2:17 AM, Tan, Tat Kin wrote:
> Hello,
> 
> Would like to know if anyone had ever consider to implement or had any
> idea to use other security measurements in mipv6 instead of the much
> talked IPSec?
> While the draft indicated most of the communications SHOULD use IPSec,
> such as during binding, i was thinking performance would be a huge
> factor under processing bandwidth hunger area such as real time
> voice processing.

IPsec provides two things:

1. Establishes session keys for the traffic.
2. Authenticates and/or encrypts every traffic packet.

First - what makes you think that performance on a per-packet basis
will suffer by "a huge factor"? Do you have any numbers...?

Second - if you abolish IPsec but decide you still need security,
you will have to perform both of the above steps. Please tell me
what makes you think that doing those things by other-than-IPsec
tool is any faster or easier on performance. (A hint: crypto
operations are the same, crypto algorithms are the same.)