Re: Header sizes in ESP implementation

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Francesco" == Francesco Trotta <[email protected]> writes:
    Francesco> The "look at me" part has to be X bytes long, where
    Francesco> 	X mod 8 = 0 (condition 1)

    Francesco> What I would know is this: Is the length of the padding the MINIMUM that
    Francesco> guarantees the condition 1? Or can be even more?

  There is no requirement in the specification that it be the minimum. Many
implementations do that. But, anyone who wants to obscure traffic profiles
will likely pad a random amount to defeat traffic analysis. They may also
send dummy packets.

  So, for the purposes of calculating bandwidth, or convincing a customer
that the overhead is reasonable, minimum may be assumed. For the purposes of
writing a packet decoder, do not assume anything.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPkEzMoqHRg3pndX9AQG1CwQAjYl+UY7dtxOl7xrDPwLv1FiGTqphysry
mpd09TZ4aADsTkeGz4JMuCA4IgyUhtSX9tyUOqgXOgslkCFuVZWULezi7p6Q3GYr
vu/dNN6eLSiQApgk+rF45Lt1JTIkjcPt5SZYrAMk+mZi/JnpamBKH8GB7HLEYctG
QGyWhXKppZs=
=E54H
-----END PGP SIGNATURE-----