RE: Any other security other than IPSec?

-----Original Message-----
From: Uri Blumenthal [mailto:[email protected]]
Sent: Tuesday, August 05, 2003 12:31 AM
To: Tan, Tat Kin
Cc: [email protected]
Subject: Re: [mobile-ip] Any other security other than IPSec?


On 8/2/2003 2:17 AM, Tan, Tat Kin wrote:
> Hello,
> 
> Would like to know if anyone had ever consider to implement or had any
> idea to use other security measurements in mipv6 instead of the much
> talked IPSec?
> While the draft indicated most of the communications SHOULD use IPSec,
> such as during binding, i was thinking performance would be a huge
> factor under processing bandwidth hunger area such as real time
> voice processing.

IPsec provides two things:

1. Establishes session keys for the traffic.
2. Authenticates and/or encrypts every traffic packet.

First - what makes you think that performance on a per-packet basis
will suffer by "a huge factor"? Do you have any numbers...?

TK : Correct me if i m wrong, that IPSec is more like a combination of encryptions methods and both parties that wants to use IPSec will have to talk to each other to negotiate a set or a few and depends on the priority. Every MN/CN would have different IPSec's combinations. Would that be extra overhead to process? would there be other alternative solution? I dont know. that's why i m asking. And a gentleman name Jari Arkko has answered my question. kindly have a read at his comment.

Second - if you abolish IPsec but decide you still need security,
you will have to perform both of the above steps. Please tell me
what makes you think that doing those things by other-than-IPsec
tool is any faster or easier on performance. (A hint: crypto
operations are the same, crypto algorithms are the same.)

TK : Again alternative solution might be available. one question everyone is interested in knowing is that, will the alternative solution provide better security system or worst? I will let you know when i have a solution. Hint : They all laugh at christopher columbus when he says the world is round ...

:)