[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

ike2: SAi1 in msg 3




In Ike2, section 3.1 for msg 3 the text reads:


The initial payloads in message three are identical to the payloads in message 1.

While this may be true for payload types, it is clearly not required for payload
contents since the key may differ if Bob chooses a proposal that changes the
DH group. This brings up the question of the contents of SAi1 in message 3:
Should this payload contain the original proposal set or the single proposal chosen
by Bob? And what should Bob do when receiving the payload?


Another question regards Bob's nonce contents in message 2: if Bob places
state information in message 2, eg. which suite he chose, what is the advantage
of encrypting this state if Bob's cookie effectively signs the nonce?


Always grateful for helpful clarification.

Jeff